last executing test programs:

45.900264419s ago: executing program 1 (id=1483):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509)
close(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (fail_nth: 1)

45.350564397s ago: executing program 1 (id=1485):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x36, &(0x7f0000000480)=[{0x9, '\x00', @data=0x8001, 0x7a7ce1c2}]})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000680)=@multiplanar_overlay={0x8, 0x3, 0x4, 0x10, 0x1000000, {}, {0x3, 0x1, 0xb, 0xc, 0x8, 0xbb, "075e9b00"}, 0x474, 0x3, {&(0x7f0000002340)=[{0x3, 0x16, {0x7}, 0x5}, {0x6a, 0xffff1e5e, {0x400}, 0x6ae5acdd}]}, 0x8, 0x0, r2})
r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x100, &(0x7f0000000500)={[{0xc1, 0x4e00, "acffb48da9f24f56e92f92d4ab64a48841e7c771341169a4fd5ddd6333f1e7173adc9ca4ed3f2e77e1130a0424aac9d071a499ce61a234c7a94c61af90a5981a70572b7fbed4d8fa1412c49f2ea63bf7c233524dc6be5d402e1bc348f6aee718aa7af5a4232903a368705fff6d8cef5c5e8f0f45bd691d5181c7bac300985b6a851daaa03083087b2a910cc65750cd1a3772f0a701d6f1ee3666b1bbfc4f964362a4984f87ff882b72805f0554ffc4e834a41801ff7df725eb4cfa39e2f568a40f"}, {0x34, 0x4e00, "639b1508dd5909fc0152fdf9c6858e73504db27a258eb29eb9ead2fe53d720f3bf9b244b66d7f869031c39df66b31293748af0a6"}]})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r5, &(0x7f0000000200)=""/184, 0xb8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0x3ff, 0x200010, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd840})
close_range(r0, 0xffffffffffffffff, 0x0)

43.442895873s ago: executing program 1 (id=1496):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000e5a1ed40d8942e8f184100000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x4, @void}, 0x10)
pipe2$watch_queue(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000200)=ANY=[@ANYRES16=r3])
sendmsg$nl_route_sched(r4, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
flock(r6, 0x2)
flock(r6, 0x5)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000040)={{0xd5, @rand_addr=0x64010102, 0x4e23, 0x3, 'wlc\x00', 0xd, 0x9, 0x54}, {@empty, 0x4e24, 0x10000, 0x2, 0xcf9, 0x3ff}}, 0x44)

43.242933688s ago: executing program 1 (id=1497):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan0\x00', @local})

42.7486213s ago: executing program 1 (id=1498):
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.stat\x00', 0x275a, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r5 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi5\x00', 0x2080, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0xfffffffd, 0x9, 0x7ff, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x4b, 0xfffffff5, 0xcd6, 0x6, 0x1db, 0x1000002, 0x7, 0x400, 0x10002, 0xf, 0x0, 0x3fe, 0x2, 0x400, 0x3, 0x0, 0x6, 0xc00, 0x3f, 0x8, 0x6, 0xffffffff, 0xfffffffc]})
write$UHID_CREATE2(r6, 0x0, 0x118)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0xe229, 0x5})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b008000fffff7ff00fe7f001000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

38.507016986s ago: executing program 1 (id=1513):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000004c0))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})

23.339025257s ago: executing program 32 (id=1513):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000004c0))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})

11.166741249s ago: executing program 0 (id=1598):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
landlock_create_ruleset(&(0x7f0000000100)={0x3006, 0x5, 0x1}, 0x18, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r5, 0x0, 0x880)
bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x333, 0x7f, 0x0, 0x2c, 0x4, @random="fe4c4b976a8d"}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x643a, 0x143e, 0x22, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

9.993538425s ago: executing program 0 (id=1600):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x10000004a5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$SEG6_CMD_SETHMAC(r3, 0x0, 0x0)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_usbip_server_init(0x1)
syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee"], 0x0)

6.707187043s ago: executing program 2 (id=1605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f3e12b9800000c0c18d35010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e48766ba4100ec66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x4b}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setregid(0x0, 0xee01)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000000, 0x2010, r7, 0x82000000)
setresgid(0xffffffffffffffff, 0x0, 0x0)
unshare(0x8040480)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x80, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x20000080, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)

6.59003592s ago: executing program 5 (id=1606):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x1000000, 0x8, 0x6, 0x21}, 0x8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x98010)
clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000))
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80045b09, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
bind$can_raw(r4, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x5, 0xffffffff, 0x101, 0x5}, 0x14)
ioctl$PPPIOCSFLAGS1(r7, 0x4004743a, &(0x7f0000000300))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

6.557350231s ago: executing program 4 (id=1607):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
syz_pidfd_open(r3, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x31b80d8c829d9089, 0x3d, 0x5, r3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r4 = socket(0x1d, 0x2, 0x6)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
timer_settime(r1, 0x1, &(0x7f00000000c0)={{r5, r6+10000000}}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x6a, 0x4, 0xfffffffd, 0x4)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)

6.318659613s ago: executing program 0 (id=1608):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000020000010902"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r4, 0x0, 0x0)
connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14)

6.109137796s ago: executing program 4 (id=1609):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
landlock_create_ruleset(&(0x7f0000000100)={0x3006, 0x5, 0x1}, 0x18, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_NODES(r5, 0x0, 0x880)
bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x333, 0x7f, 0x0, 0x2c, 0x4, @random="fe4c4b976a8d"}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x643a, 0x143e, 0x22, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5.496057365s ago: executing program 2 (id=1610):
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0)=0x5, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100120014000700000000000000000000000000000000001400030067656e65766531"], 0x64}}, 0x2000000)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_clone3(&(0x7f0000000080)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x22})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x7fff, 0x2, 0x10, "6d24910b183edc5021dc9a2d32e4d0072f17f4bc247ebe89fa54b77feb49a490"})

5.306858227s ago: executing program 2 (id=1611):
getpid()
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
mknod$loop(0x0, 0x6000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r7, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=[{'SPEAKER', @val={' \'', 'Capture'}}], 0x27)
syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c0005"], 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe)
io_uring_setup(0x400052d8, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})

5.239787436s ago: executing program 4 (id=1612):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x6, 0xd}, 0x8)

5.046834629s ago: executing program 4 (id=1613):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x6, 0xfffffffe)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {0x0, 0xfff1}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x26044028}, 0x800)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r9 = creat(&(0x7f0000000000)='./file1\x00', 0xf8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x25, 0x2, @void}, 0x10)
r10 = fanotify_init(0xf00, 0x1)
fanotify_mark(r10, 0x105, 0x40009975, r9, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0)

4.133789296s ago: executing program 2 (id=1615):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febec3595c90000000000002400000090ffffff02000000000000000000000400000003000000000000000000000000000000000000000d020000c2d76e"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)

3.397713611s ago: executing program 4 (id=1616):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x36, &(0x7f0000000480)=[{0x9, '\x00', @data=0x8001, 0x7a7ce1c2}]})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000680)=@multiplanar_overlay={0x8, 0x3, 0x4, 0x10, 0x1000000, {}, {0x3, 0x1, 0xb, 0xc, 0x8, 0xbb, "075e9b00"}, 0x474, 0x3, {&(0x7f0000002340)=[{0x3, 0x16, {0x7}, 0x5}, {0x6a, 0xffff1e5e, {0x400}, 0x6ae5acdd}]}, 0x8, 0x0, r1})
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xcc, &(0x7f0000000500)={[{0xc1, 0x4e00, "acffb48da9f24f56e92f92d4ab64a48841e7c771341169a4fd5ddd6333f1e7173adc9ca4ed3f2e77e1130a0424aac9d071a499ce61a234c7a94c61af90a5981a70572b7fbed4d8fa1412c49f2ea63bf7c233524dc6be5d402e1bc348f6aee718aa7af5a4232903a368705fff6d8cef5c5e8f0f45bd691d5181c7bac300985b6a851daaa03083087b2a910cc65750cd1a3772f0a701d6f1ee3666b1bbfc4f964362a4984f87ff882b72805f0554ffc4e834a41801ff7df725eb4cfa39e2f568a40f"}, {}]})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r4, &(0x7f0000000200)=""/184, 0xb8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0x3ff, 0x200010, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd840})
close_range(r0, 0xffffffffffffffff, 0x0)

3.22623307s ago: executing program 5 (id=1618):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febec3595c90000000000002400000090ffffff02000000000000000000000400000003000000000000000000000000000000000000000d020000c2d76e"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_open_dev$usbfs(0x0, 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)

3.188608276s ago: executing program 2 (id=1619):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r3, &(0x7f0000000200)="3b651e0eba74c3a6ce", 0x9, 0x24000000, 0x0, 0x0)
recvfrom(r3, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
read$FUSE(r7, &(0x7f0000004280)={0x2020}, 0x2020)

2.298391469s ago: executing program 3 (id=1621):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7fff, 0x2, 0x10, "6d24910b183edc5021dc9a2d32e4d0072f17f4bc247ebe89fa54b77feb49a490"})

2.091092179s ago: executing program 3 (id=1622):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0xffffffffffff7fff})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000009c0)={0x28, 0x4, r1, r1, 0x7ffffffffffffffe, 0xfffffffffffffffc})

1.849213568s ago: executing program 5 (id=1623):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4073, 0x45, 0xfe9, 0x1}, 0x28)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}})

1.846904294s ago: executing program 3 (id=1624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000004c0))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x415a, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x4000000)

1.624725716s ago: executing program 5 (id=1625):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20069a0cfbbbbbbbbbb86dd60cb800000383aff00000000000000000000ffffac1e0001ff02000000000000000000000000000102009078000000096500000000063a000000000000000000000000000000df1f7a7ecc6ed713d542f55ca30a19010000d60f000000000000000000000001672fef0f8359cfd4"], 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

1.550070324s ago: executing program 0 (id=1626):
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

1.51009858s ago: executing program 5 (id=1627):
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (fail_nth: 1)

1.436430472s ago: executing program 0 (id=1628):
socket$inet6(0xa, 0x80002, 0x0)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

934.84571ms ago: executing program 5 (id=1629):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006)
unshare(0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
socket$netlink(0x10, 0x3, 0x0)

928.147334ms ago: executing program 0 (id=1630):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0})
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x20000)
add_key(&(0x7f0000010080)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r5})
keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0)
keyctl$update(0x2, r5, 0x0, 0xff88)
bind$inet(r0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000010040))
io_uring_setup(0x2d9a, &(0x7f00000100c0)={0x0, 0x8dd3, 0x1, 0x42, 0x173})
syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)

723.761535ms ago: executing program 4 (id=1631):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r3, &(0x7f0000000200)="3b651e0eba74c3a6ce", 0x9, 0x24000000, 0x0, 0x0)
recvfrom(r3, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x800)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

569.07807ms ago: executing program 3 (id=1632):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000400)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x1f, 0x10, &(0x7f00000004c0)={0x0, 0x5}, 0x10}, 0x94) (fail_nth: 1)

174.757454ms ago: executing program 3 (id=1633):
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x13ffffffffffffff, 0x0, 0x3fd, 0x2001080, 0x3, 0x0, 0x8, 0x4000000000008d], 0x100000, 0x80})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

30.39011ms ago: executing program 3 (id=1634):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x36, &(0x7f0000000480)=[{0x9, '\x00', @data=0x8001, 0x7a7ce1c2}]})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000680)=@multiplanar_overlay={0x8, 0x3, 0x4, 0x10, 0x1000000, {}, {0x3, 0x1, 0xb, 0xc, 0x8, 0xbb, "075e9b00"}, 0x474, 0x3, {&(0x7f0000002340)=[{0x3, 0x16, {0x7}, 0x5}, {0x6a, 0xffff1e5e, {0x400}, 0x6ae5acdd}]}, 0x8, 0x0, r1})
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xcc, &(0x7f0000000500)={[{0xc1, 0x4e00, "acffb48da9f24f56e92f92d4ab64a48841e7c771341169a4fd5ddd6333f1e7173adc9ca4ed3f2e77e1130a0424aac9d071a499ce61a234c7a94c61af90a5981a70572b7fbed4d8fa1412c49f2ea63bf7c233524dc6be5d402e1bc348f6aee718aa7af5a4232903a368705fff6d8cef5c5e8f0f45bd691d5181c7bac300985b6a851daaa03083087b2a910cc65750cd1a3772f0a701d6f1ee3666b1bbfc4f964362a4984f87ff882b72805f0554ffc4e834a41801ff7df725eb4cfa39e2f568a40f"}, {}]})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r4, &(0x7f0000000200)=""/184, 0xb8)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0x3ff, 0x200010, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd840})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=1635):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
gettid()
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0xf, 0x3, 0xfffffffb, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x7537e112, 0x2, 0x9, 0x6, 0x40000003, 0x89, 0x1002, 0xf28, 0x20001e57, 0xb, 0x6, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0)
pipe2(&(0x7f0000000080), 0x4000)
sched_getaffinity(0x0, 0x8, &(0x7f00000000c0))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r7 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "1e3bed42d6e454f191479a3ddafea1315f9619f1f38b2c07c458e12bd5318048c6f0d4b362f215ca0f9662e6d4504b1c6d84b9f2ef437f94789630c113554513", 0x22}, 0x48, r7)
syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x0)
accept4(r6, 0x0, 0x0, 0x800)

kernel console output (not intermixed with test programs):

T12] vhci_hcd vhci_hcd.4: stop threads
[  560.703840][   T12] vhci_hcd vhci_hcd.4: release socket
[  560.710215][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  560.819365][ T5935] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  560.863659][T10808] usb 3-1: USB disconnect, device number 47
[  560.892221][    T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  560.984249][ T5935] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  560.993847][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.002357][ T5935] usb 2-1: Product: syz
[  561.006537][ T5935] usb 2-1: Manufacturer: syz
[  561.011598][ T5935] usb 2-1: SerialNumber: syz
[  561.021262][ T5935] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  561.035576][   T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  561.045098][T10790] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  561.072737][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  561.082385][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.091139][    T9] usb 1-1: Product: syz
[  561.095652][    T9] usb 1-1: Manufacturer: syz
[  561.100785][    T9] usb 1-1: SerialNumber: syz
[  561.112025][    T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  561.126396][ T5935] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  561.212716][T10790] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  561.222457][T10790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.231080][T10790] usb 4-1: Product: syz
[  561.235344][T10790] usb 4-1: Manufacturer: syz
[  561.240956][T10790] usb 4-1: SerialNumber: syz
[  561.272606][T10790] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  561.287114][  T798] usb 2-1: USB disconnect, device number 65
[  561.315416][    T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  561.346688][T11427] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  561.449943][ T5934] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  561.462101][ T5934] ath9k_htc: Failed to initialize the device
[  561.463091][T11430] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  561.468561][T10808] usb 3-1: ath9k_htc: USB layer deinitialized
[  561.478000][T11430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  561.529573][ T5822] Bluetooth: hci4: command 0x0406 tx timeout
[  561.609252][T10790] usb 1-1: USB disconnect, device number 47
[  561.619833][ T9783] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  561.747494][   T29] usb 4-1: USB disconnect, device number 49
[  561.752982][T11435] ubi: mtd0 is already attached to ubi16
[  561.786739][T11435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  561.793360][T11435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  561.802512][T11435] vhci_hcd vhci_hcd.0: Device attached
[  561.859301][ T9783] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  561.934640][ T9783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.967552][ T9783] usb 5-1: Product: syz
[  562.014344][ T9783] usb 5-1: Manufacturer: syz
[  562.051376][ T9783] usb 5-1: SerialNumber: syz
[  562.051672][  T985] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  562.082969][ T9783] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  562.099333][   T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  562.099494][ T5897] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  562.108095][   T10] ath9k_htc: Failed to initialize the device
[  562.122510][ T5934] usb 3-1: new low-speed USB device number 48 using dummy_hcd
[  562.136307][  T798] usb 2-1: ath9k_htc: USB layer deinitialized
[  562.169629][ T5935] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  562.176965][ T5935] ath9k_htc: Failed to initialize the device
[  562.184216][T10790] usb 1-1: ath9k_htc: USB layer deinitialized
[  562.290939][ T5934] usb 3-1: config 0 has no interfaces?
[  562.297100][ T5934] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  562.311930][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.345911][ T5934] usb 3-1: config 0 descriptor??
[  562.410358][    T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  562.425935][    T9] ath9k_htc: Failed to initialize the device
[  562.446828][   T29] usb 4-1: ath9k_htc: USB layer deinitialized
[  562.634272][    T9] usb 5-1: USB disconnect, device number 66
[  562.716309][T11436] vhci_hcd: connection closed
[  562.716519][   T12] vhci_hcd vhci_hcd.2: stop threads
[  562.728119][T10790] usb 3-1: USB disconnect, device number 48
[  562.734722][ T5965] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  562.744695][   T12] vhci_hcd vhci_hcd.2: release socket
[  562.765185][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  563.514321][T10623] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  563.540484][ T5897] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  563.559479][ T5897] ath9k_htc: Failed to initialize the device
[  563.569629][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  563.624808][ T5136] Bluetooth: hci4: command 0x0406 tx timeout
[  564.933231][T11471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  564.939769][T11471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  564.992041][T11471] vhci_hcd vhci_hcd.0: Device attached
[  565.011955][T11478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  565.039525][T11478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  565.101163][    T9] usb 3-1: new low-speed USB device number 49 using dummy_hcd
[  565.229280][T10623] usb 37-1: new low-speed USB device number 11 using vhci_hcd
[  565.271689][    T9] usb 3-1: config 0 has no interfaces?
[  565.277414][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  565.286515][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.299118][    T9] usb 3-1: config 0 descriptor??
[  566.236874][ T5965] usb 3-1: USB disconnect, device number 49
[  566.245091][T11473] vhci_hcd: connection reset by peer
[  566.253738][   T12] vhci_hcd vhci_hcd.2: stop threads
[  566.262845][   T12] vhci_hcd vhci_hcd.2: release socket
[  566.305732][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  566.470094][T11492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1378'.
[  566.485014][T11492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1378'.
[  566.492953][T11495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1379'.
[  566.511192][T11495] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1379'.
[  566.529722][ T9783] usb 1-1: new low-speed USB device number 48 using dummy_hcd
[  566.565751][T11498] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  566.576175][T11498] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  566.710737][ T9783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  566.721810][ T9783] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  566.738476][ T9783] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  566.749892][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.770366][ T9783] usb 1-1: config 0 descriptor??
[  566.780199][ T9783] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  567.044090][T11506] syzkaller0: entered promiscuous mode
[  567.060856][T11506] 0: reclassify loop, rule prio 0, protocol 800
[  569.005237][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.054665][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.327489][T11522] overlayfs: missing 'lowerdir'
[  569.370938][   T30] audit: type=1400 audit(1776506881.109:295): avc:  denied  { connect } for  pid=11524 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  569.422485][   T30] audit: type=1400 audit(1776506881.159:296): avc:  denied  { setopt } for  pid=11524 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  569.509826][   T30] audit: type=1400 audit(1776506881.249:297): avc:  denied  { bind } for  pid=11524 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  569.532832][T11525] FAULT_INJECTION: forcing a failure.
[  569.532832][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  569.549305][T11525] CPU: 0 UID: 0 PID: 11525 Comm: syz.4.1387 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  569.549334][T11525] Tainted: [L]=SOFTLOCKUP
[  569.549340][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  569.549351][T11525] Call Trace:
[  569.549357][T11525]  <TASK>
[  569.549364][T11525]  dump_stack_lvl+0x100/0x190
[  569.549389][T11525]  should_fail_ex.cold+0x5/0xa
[  569.549417][T11525]  _copy_from_user+0x2e/0xd0
[  569.549437][T11525]  copy_msghdr_from_user+0x9f/0x4f0
[  569.549460][T11525]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  569.549492][T11525]  ___sys_sendmsg+0x106/0x1e0
[  569.549515][T11525]  ? __pfx____sys_sendmsg+0x10/0x10
[  569.549564][T11525]  __sys_sendmsg+0x170/0x220
[  569.549590][T11525]  ? __pfx___sys_sendmsg+0x10/0x10
[  569.549626][T11525]  ? rcu_is_watching+0x12/0xc0
[  569.549656][T11525]  do_syscall_64+0x10b/0xf80
[  569.549678][T11525]  ? clear_bhb_loop+0x40/0x90
[  569.549700][T11525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.549717][T11525] RIP: 0033:0x7ff760f9c819
[  569.549733][T11525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.549749][T11525] RSP: 002b:00007ff761f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  569.549767][T11525] RAX: ffffffffffffffda RBX: 00007ff761215fa0 RCX: 00007ff760f9c819
[  569.549778][T11525] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  569.549789][T11525] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  569.549799][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.549809][T11525] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  569.549832][T11525]  </TASK>
[  570.158295][T11533] syzkaller0: entered promiscuous mode
[  570.188503][T11535] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1390'.
[  570.200837][T11533] 0: reclassify loop, rule prio 0, protocol 800
[  570.217941][ T9783] usb 1-1: USB disconnect, device number 48
[  570.222625][T11535] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1390'.
[  570.319364][T10623] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  570.498577][T11543] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  570.522107][T11548] FAULT_INJECTION: forcing a failure.
[  570.522107][T11548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  570.543890][T11548] CPU: 1 UID: 0 PID: 11548 Comm: syz.1.1395 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  570.543917][T11548] Tainted: [L]=SOFTLOCKUP
[  570.543923][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  570.543933][T11548] Call Trace:
[  570.543939][T11548]  <TASK>
[  570.543946][T11548]  dump_stack_lvl+0x100/0x190
[  570.543971][T11548]  should_fail_ex.cold+0x5/0xa
[  570.543995][T11548]  _copy_to_user+0x32/0xd0
[  570.544014][T11548]  simple_read_from_buffer+0xcb/0x170
[  570.544034][T11548]  proc_fail_nth_read+0x1af/0x230
[  570.544059][T11548]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  570.544092][T11548]  ? rw_verify_area+0xce/0x6d0
[  570.544116][T11548]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  570.544141][T11548]  vfs_read+0x1e4/0xb30
[  570.544170][T11548]  ? __pfx_vfs_read+0x10/0x10
[  570.544194][T11548]  ? __fget_files+0x215/0x3d0
[  570.544217][T11548]  ? __fget_files+0x21f/0x3d0
[  570.544241][T11548]  ksys_read+0x12a/0x250
[  570.544265][T11548]  ? __pfx_ksys_read+0x10/0x10
[  570.544292][T11548]  ? rcu_is_watching+0x12/0xc0
[  570.544321][T11548]  do_syscall_64+0x10b/0xf80
[  570.544344][T11548]  ? clear_bhb_loop+0x40/0x90
[  570.544365][T11548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.544381][T11548] RIP: 0033:0x7f24a795d04e
[  570.544396][T11548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  570.544411][T11548] RSP: 002b:00007f24a5bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  570.544428][T11548] RAX: ffffffffffffffda RBX: 00007f24a5bf66c0 RCX: 00007f24a795d04e
[  570.544439][T11548] RDX: 000000000000000f RSI: 00007f24a5bf60a0 RDI: 0000000000000004
[  570.544448][T11548] RBP: 00007f24a5bf6090 R08: 0000000000000000 R09: 0000000000000000
[  570.544457][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.544466][T11548] R13: 00007f24a7c16038 R14: 00007f24a7c15fa0 R15: 00007ffc58780d38
[  570.544490][T11548]  </TASK>
[  570.945802][T11563] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  571.059464][ T9783] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  571.072198][T11567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1400'.
[  571.093814][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1400'.
[  571.119514][   T30] audit: type=1400 audit(1776506882.859:298): avc:  denied  { write } for  pid=11566 comm="syz.4.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  571.209662][ T5965] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  571.224996][ T9783] usb 4-1: config 0 has an invalid interface number: 3 but max is 2
[  571.234318][ T9783] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  571.242956][ T9783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  571.253852][ T9783] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  571.263886][ T9783] usb 4-1: config 0 has no interface number 0
[  571.270527][ T9783] usb 4-1: config 0 has no interface number 1
[  571.277187][ T9783] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice=29.ac
[  571.286691][ T9783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.352003][ T9783] usb 4-1: config 0 descriptor??
[  571.371770][ T9783] usb 4-1: unknown number of interfaces: 2
[  571.392259][ T5965] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  571.407535][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.426058][ T5965] usb 1-1: Product: syz
[  571.436765][ T5965] usb 1-1: Manufacturer: syz
[  571.442916][ T5965] usb 1-1: SerialNumber: syz
[  571.467307][ T5965] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  571.485153][T10623] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  571.540453][T11574] FAULT_INJECTION: forcing a failure.
[  571.540453][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  571.565374][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.2.1403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  571.565401][T11574] Tainted: [L]=SOFTLOCKUP
[  571.565407][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  571.565417][T11574] Call Trace:
[  571.565422][T11574]  <TASK>
[  571.565429][T11574]  dump_stack_lvl+0x100/0x190
[  571.565451][T11574]  should_fail_ex.cold+0x5/0xa
[  571.565474][T11574]  _copy_to_user+0x32/0xd0
[  571.565492][T11574]  simple_read_from_buffer+0xcb/0x170
[  571.565513][T11574]  proc_fail_nth_read+0x1af/0x230
[  571.565538][T11574]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  571.565564][T11574]  ? rw_verify_area+0xce/0x6d0
[  571.565585][T11574]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  571.565609][T11574]  vfs_read+0x1e4/0xb30
[  571.565633][T11574]  ? __pfx_vfs_read+0x10/0x10
[  571.565649][T11574]  ? __fget_files+0x215/0x3d0
[  571.565670][T11574]  ? __fget_files+0x21f/0x3d0
[  571.565694][T11574]  ksys_read+0x12a/0x250
[  571.565717][T11574]  ? __pfx_ksys_read+0x10/0x10
[  571.565741][T11574]  ? rcu_is_watching+0x12/0xc0
[  571.565765][T11574]  do_syscall_64+0x10b/0xf80
[  571.565779][T11574]  ? clear_bhb_loop+0x40/0x90
[  571.565792][T11574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.565803][T11574] RIP: 0033:0x7fe8b435d04e
[  571.565812][T11574] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  571.565825][T11574] RSP: 002b:00007fe8b528dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  571.565841][T11574] RAX: ffffffffffffffda RBX: 00007fe8b528e6c0 RCX: 00007fe8b435d04e
[  571.565852][T11574] RDX: 000000000000000f RSI: 00007fe8b528e0a0 RDI: 0000000000000004
[  571.565861][T11574] RBP: 00007fe8b528e090 R08: 0000000000000000 R09: 0000000000000000
[  571.565870][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.565880][T11574] R13: 00007fe8b4616038 R14: 00007fe8b4615fa0 R15: 00007fff43f1e0d8
[  571.565902][T11574]  </TASK>
[  571.816452][ T5965] usb 4-1: USB disconnect, device number 50
[  572.014746][ T9783] usb 1-1: USB disconnect, device number 49
[  572.062440][T11579] syzkaller0: entered promiscuous mode
[  572.077827][T11579] 0: reclassify loop, rule prio 0, protocol 800
[  572.186286][T11582] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  572.196425][T11582] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  572.573564][T10623] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  572.597915][T10623] ath9k_htc: Failed to initialize the device
[  572.622374][ T9783] usb 1-1: ath9k_htc: USB layer deinitialized
[  572.719337][   T29] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  572.872208][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  572.901134][   T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  572.917993][   T29] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  572.929310][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.966738][   T29] usb 4-1: config 0 descriptor??
[  573.169815][T11611] ubi: mtd0 is already attached to ubi16
[  573.435034][T11611] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  573.441645][T11611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  573.489432][T11611] vhci_hcd vhci_hcd.0: Device attached
[  573.597327][T11623] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  573.649307][T10623] usb 1-1: new low-speed USB device number 50 using dummy_hcd
[  573.749328][    T9] usb 33-1: new low-speed USB device number 11 using vhci_hcd
[  573.817092][T10623] usb 1-1: config 0 has no interfaces?
[  573.817514][T11594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.838416][T10623] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  573.849322][ T9783] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  573.862502][T11594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.875980][T10623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.900512][T10623] usb 1-1: config 0 descriptor??
[  573.921569][   T29] usbhid 4-1:0.0: can't add hid device: -71
[  573.934827][   T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  573.955969][   T29] usb 4-1: USB disconnect, device number 51
[  574.032015][ T9783] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  574.044197][ T9783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.055734][ T9783] usb 2-1: Product: syz
[  574.060401][ T9783] usb 2-1: Manufacturer: syz
[  574.065110][ T9783] usb 2-1: SerialNumber: syz
[  574.075659][ T9783] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  574.092251][ T5897] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  574.154756][T10623] usb 1-1: USB disconnect, device number 50
[  574.165527][T11617] vhci_hcd: connection reset by peer
[  574.191619][   T62] vhci_hcd vhci_hcd.0: stop threads
[  574.197302][   T62] vhci_hcd vhci_hcd.0: release socket
[  574.205047][   T62] vhci_hcd vhci_hcd.0: disconnect device
[  574.431813][T11637] FAULT_INJECTION: forcing a failure.
[  574.431813][T11637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  574.494726][T11637] CPU: 1 UID: 0 PID: 11637 Comm: syz.2.1419 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  574.494756][T11637] Tainted: [L]=SOFTLOCKUP
[  574.494762][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  574.494772][T11637] Call Trace:
[  574.494778][T11637]  <TASK>
[  574.494785][T11637]  dump_stack_lvl+0x100/0x190
[  574.494816][T11637]  should_fail_ex.cold+0x5/0xa
[  574.494843][T11637]  _copy_from_user+0x2e/0xd0
[  574.494862][T11637]  copy_msghdr_from_user+0x9f/0x4f0
[  574.494886][T11637]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  574.494919][T11637]  ___sys_sendmsg+0x106/0x1e0
[  574.494941][T11637]  ? __pfx____sys_sendmsg+0x10/0x10
[  574.494992][T11637]  __sys_sendmsg+0x170/0x220
[  574.495019][T11637]  ? __pfx___sys_sendmsg+0x10/0x10
[  574.495054][T11637]  ? rcu_is_watching+0x12/0xc0
[  574.495083][T11637]  do_syscall_64+0x10b/0xf80
[  574.495106][T11637]  ? clear_bhb_loop+0x40/0x90
[  574.495128][T11637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.495145][T11637] RIP: 0033:0x7fe8b439c819
[  574.495160][T11637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.495176][T11637] RSP: 002b:00007fe8b528e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  574.495193][T11637] RAX: ffffffffffffffda RBX: 00007fe8b4615fa0 RCX: 00007fe8b439c819
[  574.495204][T11637] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  574.495214][T11637] RBP: 00007fe8b528e090 R08: 0000000000000000 R09: 0000000000000000
[  574.495224][T11637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.495234][T11637] R13: 00007fe8b4616038 R14: 00007fe8b4615fa0 R15: 00007fff43f1e0d8
[  574.495258][T11637]  </TASK>
[  574.514553][T10623] usb 2-1: USB disconnect, device number 66
[  574.897781][T11643] FAULT_INJECTION: forcing a failure.
[  574.897781][T11643] name failslab, interval 1, probability 0, space 0, times 1
[  574.911543][T11643] CPU: 1 UID: 0 PID: 11643 Comm: syz.2.1421 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  574.911572][T11643] Tainted: [L]=SOFTLOCKUP
[  574.911577][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  574.911587][T11643] Call Trace:
[  574.911593][T11643]  <TASK>
[  574.911600][T11643]  dump_stack_lvl+0x100/0x190
[  574.911625][T11643]  should_fail_ex.cold+0x5/0xa
[  574.911651][T11643]  should_failslab+0xc2/0x120
[  574.911668][T11643]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  574.911692][T11643]  ? __inet_bhash2_update_saddr+0x1b7/0x18d0
[  574.911719][T11643]  ? ip_route_output_key_hash+0x14c/0x2b0
[  574.911749][T11643]  __inet_bhash2_update_saddr+0x1b7/0x18d0
[  574.911788][T11643]  tcp_v4_connect+0x15b2/0x1b40
[  574.911825][T11643]  ? __pfx_tcp_v4_connect+0x10/0x10
[  574.911855][T11643]  __inet_stream_connect+0x208/0xfa0
[  574.911883][T11643]  ? __pfx___inet_stream_connect+0x10/0x10
[  574.911917][T11643]  tcp_sendmsg_fastopen+0x3ed/0x750
[  574.911945][T11643]  tcp_sendmsg_locked+0x27bb/0x4500
[  574.911968][T11643]  ? irqentry_exit+0x246/0x790
[  574.911991][T11643]  ? lockdep_hardirqs_on+0x78/0x100
[  574.912016][T11643]  ? __lock_acquire+0x4a5/0x2630
[  574.912037][T11643]  ? __lock_acquire+0x4a5/0x2630
[  574.912057][T11643]  ? lock_sock_nested+0x41/0xf0
[  574.912083][T11643]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  574.912108][T11643]  ? do_raw_spin_lock+0x128/0x260
[  574.912132][T11643]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  574.912162][T11643]  ? __local_bh_enable_ip+0x9e/0x120
[  574.912190][T11643]  tcp_sendmsg+0x2e/0x50
[  574.912210][T11643]  ? __pfx_tcp_sendmsg+0x10/0x10
[  574.912232][T11643]  inet_sendmsg+0xb9/0x140
[  574.912254][T11643]  __sys_sendto+0x446/0x4b0
[  574.912277][T11643]  ? __pfx_inet_sendmsg+0x10/0x10
[  574.912299][T11643]  ? __pfx___sys_sendto+0x10/0x10
[  574.912321][T11643]  ? rcu_is_watching+0x12/0xc0
[  574.912366][T11643]  ? ksys_write+0x1ac/0x250
[  574.912392][T11643]  ? __pfx_ksys_write+0x10/0x10
[  574.912417][T11643]  ? rcu_is_watching+0x12/0xc0
[  574.912444][T11643]  __x64_sys_sendto+0xe0/0x1c0
[  574.912467][T11643]  ? do_syscall_64+0x90/0xf80
[  574.912490][T11643]  ? lockdep_hardirqs_on+0x78/0x100
[  574.912512][T11643]  do_syscall_64+0x10b/0xf80
[  574.912534][T11643]  ? clear_bhb_loop+0x40/0x90
[  574.912556][T11643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.912573][T11643] RIP: 0033:0x7fe8b439c819
[  574.912588][T11643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.912604][T11643] RSP: 002b:00007fe8b524c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  574.912621][T11643] RAX: ffffffffffffffda RBX: 00007fe8b4616180 RCX: 00007fe8b439c819
[  574.912632][T11643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  574.912642][T11643] RBP: 00007fe8b524c090 R08: 0000200000e68000 R09: 0000000000000010
[  574.912653][T11643] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001
[  574.912663][T11643] R13: 00007fe8b4616218 R14: 00007fe8b4616180 R15: 00007fff43f1e0d8
[  574.912687][T11643]  </TASK>
[  575.220416][ T5897] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  575.228266][ T5897] ath9k_htc: Failed to initialize the device
[  575.243607][T10623] usb 2-1: ath9k_htc: USB layer deinitialized
[  575.324839][ T5965] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  576.209230][ T5965] usb 4-1: Using ep0 maxpacket: 32
[  576.216744][ T5965] usb 4-1: config 5 has an invalid interface number: 211 but max is 0
[  576.235831][ T5965] usb 4-1: config 5 has no interface number 0
[  576.256502][ T5965] usb 4-1: config 5 interface 211 has no altsetting 0
[  576.305296][ T5965] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= e.aa
[  576.339667][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.374819][ T5965] usb 4-1: Product: syz
[  576.383240][ T5965] usb 4-1: Manufacturer: syz
[  576.414037][ T5965] usb 4-1: SerialNumber: syz
[  576.617881][T11660] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1426'.
[  576.994220][T11667] FAULT_INJECTION: forcing a failure.
[  576.994220][T11667] name failslab, interval 1, probability 0, space 0, times 0
[  577.011122][T11667] CPU: 1 UID: 0 PID: 11667 Comm: syz.4.1427 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  577.011150][T11667] Tainted: [L]=SOFTLOCKUP
[  577.011156][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  577.011166][T11667] Call Trace:
[  577.011171][T11667]  <TASK>
[  577.011178][T11667]  dump_stack_lvl+0x100/0x190
[  577.011202][T11667]  should_fail_ex.cold+0x5/0xa
[  577.011223][T11667]  ? tomoyo_realpath_from_path+0xb6/0x690
[  577.011236][T11667]  should_failslab+0xc2/0x120
[  577.011246][T11667]  __kmalloc_noprof+0xe0/0x850
[  577.011260][T11667]  ? kfree+0x1dd/0x6c0
[  577.011274][T11667]  tomoyo_realpath_from_path+0xb6/0x690
[  577.011287][T11667]  tomoyo_path_number_perm+0x23c/0x580
[  577.011308][T11667]  ? tomoyo_path_number_perm+0x22e/0x580
[  577.011331][T11667]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  577.011374][T11667]  ? find_held_lock+0x2b/0x80
[  577.011390][T11667]  ? __fget_files+0x215/0x3d0
[  577.011401][T11667]  ? hook_file_ioctl_common+0x149/0x410
[  577.011412][T11667]  ? __fget_files+0x215/0x3d0
[  577.011424][T11667]  ? __fget_files+0x21f/0x3d0
[  577.011439][T11667]  security_file_ioctl+0xd3/0x230
[  577.011465][T11667]  __x64_sys_ioctl+0xb7/0x210
[  577.011490][T11667]  do_syscall_64+0x10b/0xf80
[  577.011511][T11667]  ? clear_bhb_loop+0x40/0x90
[  577.011525][T11667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.011537][T11667] RIP: 0033:0x7ff760f9c819
[  577.011552][T11667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.011567][T11667] RSP: 002b:00007ff761f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  577.011584][T11667] RAX: ffffffffffffffda RBX: 00007ff761215fa0 RCX: 00007ff760f9c819
[  577.011594][T11667] RDX: 0000200000000180 RSI: 00000000c040ff0b RDI: 0000000000000003
[  577.011607][T11667] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  577.011617][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.011625][T11667] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  577.011647][T11667]  </TASK>
[  577.011666][T11667] ERROR: Out of memory at tomoyo_realpath_from_path.
[  578.276137][ T5965] gspca_main: spca500-2.14.0 probing 046d:0900
[  578.292644][ T5965] gspca_spca500: reg write: error -71
[  578.317935][ T5965] gspca_spca500: reg write: error -71
[  578.337522][ T5965] gspca_spca500: reg write: error -71
[  578.350163][ T5965] gspca_spca500: reg write: error -71
[  578.369456][ T5965] gspca_spca500: reg write: error -71
[  578.396737][ T5965] gspca_spca500: reg write: error -71
[  578.419243][ T5965] gspca_spca500: reg write: error -71
[  578.434541][ T5965] gspca_spca500: reg write: error -71
[  578.449689][ T5965] gspca_spca500: reg write: error -71
[  578.499537][ T5965] gspca_spca500: reg write: error -71
[  578.527665][ T5965] gspca_spca500: reg write: error -71
[  578.555312][ T5965] gspca_spca500: reg write: error -71
[  578.623063][ T5965] gspca_spca500: reg write: error -71
[  578.641750][ T5965] gspca_spca500: reg write: error -71
[  578.712828][ T5965] usb 4-1: USB disconnect, device number 52
[  578.757633][T11693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  578.809127][ T5897] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  578.843692][T11696] syzkaller0: entered promiscuous mode
[  578.851286][T11693] openvswitch: netlink: Flow actions attr not present in new flow.
[  578.872683][T11696] syzkaller0: entered allmulticast mode
[  578.888542][   T30] audit: type=1400 audit(1776506890.619:299): avc:  denied  { block_suspend } for  pid=11695 comm="syz.3.1434" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  578.922557][    T9] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  578.959814][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  578.969946][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  578.980276][ T5897] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  579.004378][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0
[  579.040706][ T5897] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  579.056152][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.072062][ T5897] usb 2-1: Product: syz
[  579.078000][ T5897] usb 2-1: Manufacturer: syz
[  579.091497][ T5897] usb 2-1: SerialNumber: syz
[  579.158120][ T5897] usb 2-1: config 0 descriptor??
[  579.408440][   T30] audit: type=1400 audit(1776506891.139:300): avc:  denied  { read } for  pid=11699 comm="syz.3.1436" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  579.444627][   T30] audit: type=1400 audit(1776506891.169:301): avc:  denied  { open } for  pid=11699 comm="syz.3.1436" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  579.513612][   T30] audit: type=1400 audit(1776506891.169:302): avc:  denied  { ioctl } for  pid=11699 comm="syz.3.1436" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  579.586738][   T30] audit: type=1400 audit(1776506891.229:303): avc:  denied  { write } for  pid=11699 comm="syz.3.1436" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  579.633346][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'.
[  579.655303][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'.
[  579.695501][   T30] audit: type=1400 audit(1776506891.349:304): avc:  denied  { append } for  pid=11685 comm="syz.1.1433" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  579.760623][ T5897] gs_usb 2-1:0.0: Couldn't get device config: (err=-71)
[  579.772250][ T5897] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  579.787752][ T5897] usb 2-1: USB disconnect, device number 67
[  580.092587][T11709] ubi: mtd0 is already attached to ubi16
[  580.117392][T11709] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  580.124015][T11709] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  580.152548][T11709] vhci_hcd vhci_hcd.0: Device attached
[  580.929491][ T9783] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  580.940945][ T5897] usb 33-1: new low-speed USB device number 12 using vhci_hcd
[  580.942231][   T30] audit: type=1400 audit(1776506892.669:305): avc:  denied  { ioctl } for  pid=11720 comm="syz.2.1441" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  581.219690][   T30] audit: type=1400 audit(1776506892.959:306): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  581.330978][ T9783] usb 1-1: config 0 has no interfaces?
[  581.333085][T11733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  581.366714][ T9783] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  581.370858][T11733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  581.377918][   T30] audit: type=1400 audit(1776506893.099:307): avc:  denied  { bind } for  pid=11734 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  581.419550][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.434470][   T30] audit: type=1400 audit(1776506893.119:308): avc:  denied  { relabelfrom } for  pid=11731 comm="syz.3.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  581.456115][ T9783] usb 1-1: config 0 descriptor??
[  581.585909][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1446'.
[  581.606490][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'.
[  581.652765][T11752] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  581.828340][T11755] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  581.839742][T11755] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  581.858021][ T5965] usb 1-1: USB disconnect, device number 51
[  581.875496][T11755] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  581.886952][T11717] vhci_hcd: connection reset by peer
[  581.894009][ T1117] vhci_hcd vhci_hcd.0: stop threads
[  581.909398][T10623] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  581.921936][ T1117] vhci_hcd vhci_hcd.0: release socket
[  581.936614][ T1117] vhci_hcd vhci_hcd.0: disconnect device
[  582.084006][T10623] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  582.100383][T10623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.109785][T10623] usb 2-1: Product: syz
[  582.114035][T10623] usb 2-1: Manufacturer: syz
[  582.119443][T10623] usb 2-1: SerialNumber: syz
[  582.140099][T10623] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  582.155841][ T5965] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  582.161562][T11762] FAULT_INJECTION: forcing a failure.
[  582.161562][T11762] name failslab, interval 1, probability 0, space 0, times 0
[  582.181880][ T9783] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  582.192815][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.4.1452 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  582.192840][T11762] Tainted: [L]=SOFTLOCKUP
[  582.192845][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  582.192854][T11762] Call Trace:
[  582.192859][T11762]  <TASK>
[  582.192869][T11762]  dump_stack_lvl+0x100/0x190
[  582.192893][T11762]  should_fail_ex.cold+0x5/0xa
[  582.192924][T11762]  should_failslab+0xc2/0x120
[  582.192940][T11762]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  582.192961][T11762]  ? skb_clone+0x190/0x400
[  582.192989][T11762]  skb_clone+0x190/0x400
[  582.193014][T11762]  netlink_deliver_tap+0xaed/0xcc0
[  582.193038][T11762]  netlink_unicast+0x62b/0x850
[  582.193060][T11762]  ? __pfx_netlink_unicast+0x10/0x10
[  582.193085][T11762]  netlink_sendmsg+0x8b0/0xda0
[  582.193107][T11762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.193123][T11762]  ? __might_fault+0x80/0x140
[  582.193153][T11762]  ____sys_sendmsg+0x9e1/0xb70
[  582.193170][T11762]  ? __pfx_netlink_sendmsg+0x10/0x10
[  582.193191][T11762]  ? __pfx_____sys_sendmsg+0x10/0x10
[  582.193221][T11762]  ___sys_sendmsg+0x190/0x1e0
[  582.193243][T11762]  ? __pfx____sys_sendmsg+0x10/0x10
[  582.193293][T11762]  __sys_sendmsg+0x170/0x220
[  582.193320][T11762]  ? __pfx___sys_sendmsg+0x10/0x10
[  582.193354][T11762]  ? rcu_is_watching+0x12/0xc0
[  582.193381][T11762]  do_syscall_64+0x10b/0xf80
[  582.193404][T11762]  ? clear_bhb_loop+0x40/0x90
[  582.193425][T11762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.193441][T11762] RIP: 0033:0x7ff760f9c819
[  582.193456][T11762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.193472][T11762] RSP: 002b:00007ff761f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.193487][T11762] RAX: ffffffffffffffda RBX: 00007ff761215fa0 RCX: 00007ff760f9c819
[  582.193497][T11762] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  582.193507][T11762] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  582.193517][T11762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.193526][T11762] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  582.193548][T11762]  </TASK>
[  582.195278][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1452'.
[  582.581499][   T29] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  582.648579][  T798] usb 2-1: USB disconnect, device number 68
[  582.662081][ T9783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.706161][ T9783] usb 3-1: config 0 has no interfaces?
[  582.754707][   T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.766652][   T29] usb 4-1: config 0 has no interfaces?
[  582.787277][ T9783] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  582.800203][   T29] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  582.830908][ T9783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.843038][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.896760][   T29] usb 4-1: config 0 descriptor??
[  582.903332][ T9783] usb 3-1: config 0 descriptor??
[  583.219400][ T5965] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  583.233527][ T5965] ath9k_htc: Failed to initialize the device
[  583.260193][  T798] usb 2-1: ath9k_htc: USB layer deinitialized
[  584.023687][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  584.023704][   T30] audit: type=1400 audit(1776506895.759:319): avc:  denied  { nlmsg_read } for  pid=11757 comm="syz.3.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  584.039403][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'.
[  584.112951][T11786] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2569 sclass=netlink_xfrm_socket pid=11786 comm=syz.3.1450
[  584.585311][T11796] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  584.640204][T11798] syzkaller0: entered promiscuous mode
[  584.650196][T11798] 0: reclassify loop, rule prio 0, protocol 800
[  584.722565][    T9] usb 3-1: USB disconnect, device number 50
[  584.807697][T11802] mmap: syz.0.1465 (11802) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  584.920633][   T29] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  585.110850][   T30] audit: type=1400 audit(1776506896.749:320): avc:  denied  { create } for  pid=11800 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  585.162457][   T30] audit: type=1400 audit(1776506896.769:321): avc:  denied  { listen } for  pid=11800 comm="syz.2.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  585.202834][   T30] audit: type=1400 audit(1776506896.769:322): avc:  denied  { ioctl } for  pid=11800 comm="syz.2.1464" path="socket:[42653]" dev="sockfs" ino=42653 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  585.282518][   T29] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  585.292902][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.321040][   T29] usb 2-1: Product: syz
[  585.341578][   T29] usb 2-1: Manufacturer: syz
[  585.353963][   T29] usb 2-1: SerialNumber: syz
[  585.379676][   T29] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  585.396627][  T798] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  585.504402][T11810] FAULT_INJECTION: forcing a failure.
[  585.504402][T11810] name failslab, interval 1, probability 0, space 0, times 0
[  585.518253][T11810] CPU: 0 UID: 0 PID: 11810 Comm: syz.2.1466 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  585.518283][T11810] Tainted: [L]=SOFTLOCKUP
[  585.518290][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  585.518298][T11810] Call Trace:
[  585.518305][T11810]  <TASK>
[  585.518311][T11810]  dump_stack_lvl+0x100/0x190
[  585.518335][T11810]  should_fail_ex.cold+0x5/0xa
[  585.518356][T11810]  ? tomoyo_realpath_from_path+0xb6/0x690
[  585.518372][T11810]  should_failslab+0xc2/0x120
[  585.518388][T11810]  __kmalloc_noprof+0xe0/0x850
[  585.518408][T11810]  ? kfree+0x1dd/0x6c0
[  585.518431][T11810]  tomoyo_realpath_from_path+0xb6/0x690
[  585.518451][T11810]  tomoyo_path_number_perm+0x23c/0x580
[  585.518472][T11810]  ? tomoyo_path_number_perm+0x22e/0x580
[  585.518497][T11810]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  585.518540][T11810]  ? find_held_lock+0x2b/0x80
[  585.518565][T11810]  ? __fget_files+0x215/0x3d0
[  585.518582][T11810]  ? hook_file_ioctl_common+0x149/0x410
[  585.518615][T11810]  ? __fget_files+0x215/0x3d0
[  585.518635][T11810]  ? __fget_files+0x21f/0x3d0
[  585.518656][T11810]  security_file_ioctl+0xd3/0x230
[  585.518682][T11810]  __x64_sys_ioctl+0xb7/0x210
[  585.518708][T11810]  do_syscall_64+0x10b/0xf80
[  585.518731][T11810]  ? clear_bhb_loop+0x40/0x90
[  585.518751][T11810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.518767][T11810] RIP: 0033:0x7fe8b439c819
[  585.518781][T11810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.518797][T11810] RSP: 002b:00007fe8b526d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  585.518813][T11810] RAX: ffffffffffffffda RBX: 00007fe8b4616090 RCX: 00007fe8b439c819
[  585.518823][T11810] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000005
[  585.518833][T11810] RBP: 00007fe8b526d090 R08: 0000000000000000 R09: 0000000000000000
[  585.518843][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  585.518852][T11810] R13: 00007fe8b4616128 R14: 00007fe8b4616090 R15: 00007fff43f1e0d8
[  585.518882][T11810]  </TASK>
[  585.730070][T11810] ERROR: Out of memory at tomoyo_realpath_from_path.
[  586.116702][ T5965] usb 4-1: USB disconnect, device number 53
[  586.131661][ T5897] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  586.312466][T11816] ubi: mtd0 is already attached to ubi16
[  586.418291][T11816] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  586.424921][T11816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  586.432908][T11816] vhci_hcd vhci_hcd.0: Device attached
[  586.678259][  T798] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  586.760346][ T5897] usb 33-1: device descriptor read/64, error -110
[  586.829221][ T9783] usb 2-1: USB disconnect, device number 69
[  586.847338][  T798] ath9k_htc: Failed to initialize the device
[  586.862533][ T9783] usb 2-1: ath9k_htc: USB layer deinitialized
[  586.876531][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1469'.
[  586.933113][T11819] vhci_hcd: connection closed
[  586.933327][   T12] vhci_hcd vhci_hcd.0: stop threads
[  586.945410][   T12] vhci_hcd vhci_hcd.0: release socket
[  586.963804][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  587.069400][ T5965] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  587.122834][   T30] audit: type=1400 audit(1776506898.859:323): avc:  denied  { create } for  pid=11823 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  587.124886][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'.
[  587.143879][   T30] audit: type=1400 audit(1776506898.859:324): avc:  denied  { write } for  pid=11823 comm="syz.2.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  587.237105][ T5965] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  587.246611][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.256915][ T5965] usb 4-1: Product: syz
[  587.262493][ T5965] usb 4-1: Manufacturer: syz
[  587.267263][ T5965] usb 4-1: SerialNumber: syz
[  587.281531][ T5965] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  587.303347][    T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  587.796867][T11834] netlink: 'syz.0.1473': attribute type 25 has an invalid length.
[  587.830109][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'.
[  587.840258][  T798] usb 4-1: USB disconnect, device number 54
[  588.320673][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  588.320731][T11834] netlink: 'syz.0.1473': attribute type 25 has an invalid length.
[  588.330194][    T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  588.330334][    T9] ath9k_htc: Failed to initialize the device
[  588.338209][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'.
[  588.345754][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  588.370631][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  588.379764][  T798] usb 4-1: ath9k_htc: USB layer deinitialized
[  588.379833][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  589.864340][T11848] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0
[  589.871814][T11848] PKCS7: Only support pkcs7_signedData type
[  589.885864][   T30] audit: type=1400 audit(1776506901.599:325): avc:  denied  { ioctl } for  pid=11843 comm="syz.1.1476" path="socket:[42842]" dev="sockfs" ino=42842 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  590.111872][T11846] ubi: mtd0 is already attached to ubi16
[  590.122000][   T30] audit: type=1400 audit(1776506901.849:326): avc:  denied  { watch watch_reads } for  pid=11857 comm="syz.4.1481" path="/295" dev="tmpfs" ino=1551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  590.484970][T11846] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  590.491580][T11846] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  590.499173][T11846] vhci_hcd vhci_hcd.0: Device attached
[  590.728191][T11874] FAULT_INJECTION: forcing a failure.
[  590.728191][T11874] name failslab, interval 1, probability 0, space 0, times 0
[  590.739147][ T5897] usb 39-1: new low-speed USB device number 18 using vhci_hcd
[  590.769369][  T798] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[  590.778240][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.1.1483 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.778259][T11874] Tainted: [L]=SOFTLOCKUP
[  590.778262][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  590.778268][T11874] Call Trace:
[  590.778272][T11874]  <TASK>
[  590.778276][T11874]  dump_stack_lvl+0x100/0x190
[  590.778291][T11874]  should_fail_ex.cold+0x5/0xa
[  590.778306][T11874]  should_failslab+0xc2/0x120
[  590.778317][T11874]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  590.778332][T11874]  ? do_getname+0x35/0x390
[  590.778345][T11874]  ? fput+0x79/0x100
[  590.778358][T11874]  do_getname+0x35/0x390
[  590.778373][T11874]  __x64_sys_execveat+0xc5/0x130
[  590.778390][T11874]  do_syscall_64+0x10b/0xf80
[  590.778405][T11874]  ? clear_bhb_loop+0x40/0x90
[  590.778417][T11874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.778428][T11874] RIP: 0033:0x7f24a799c819
[  590.778437][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.778448][T11874] RSP: 002b:00007f24a5bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  590.778458][T11874] RAX: ffffffffffffffda RBX: 00007f24a7c16090 RCX: 00007f24a799c819
[  590.778465][T11874] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  590.778471][T11874] RBP: 00007f24a5bd5090 R08: 0000000000000000 R09: 0000000000000000
[  590.778478][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.778484][T11874] R13: 00007f24a7c16128 R14: 00007f24a7c16090 R15: 00007ffc58780d38
[  590.778496][T11874]  </TASK>
[  591.034302][T11862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1478'.
[  591.179474][  T798] usb 4-1: device descriptor read/64, error -71
[  591.188372][T11881] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  591.287617][   T30] audit: type=1400 audit(1776506903.019:327): avc:  denied  { create } for  pid=11883 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  591.337917][   T30] audit: type=1400 audit(1776506903.019:328): avc:  denied  { sys_admin } for  pid=11883 comm="syz.0.1486" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  591.342027][T11885] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.1486'.
[  591.369618][T11885] openvswitch: netlink: Flow key attr not present in new flow.
[  591.439209][  T798] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[  591.459187][ T5965] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  591.581842][  T798] usb 4-1: device descriptor read/64, error -71
[  591.628226][ T5965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  591.657153][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.706773][  T798] usb usb4-port1: attempt power cycle
[  591.726823][ T5965] usb 2-1: Product: syz
[  591.732438][T11864] vhci_hcd: connection reset by peer
[  591.739756][   T62] vhci_hcd vhci_hcd.3: stop threads
[  591.746218][   T62] vhci_hcd vhci_hcd.3: release socket
[  591.755402][   T62] vhci_hcd vhci_hcd.3: disconnect device
[  591.763647][ T5965] usb 2-1: Manufacturer: syz
[  591.774522][ T5965] usb 2-1: SerialNumber: syz
[  591.788177][ T5965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  591.810682][T10623] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  591.919311][ T9783] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  591.992627][T11899] FAULT_INJECTION: forcing a failure.
[  591.992627][T11899] name failslab, interval 1, probability 0, space 0, times 0
[  592.005995][T11899] CPU: 0 UID: 0 PID: 11899 Comm: syz.3.1490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.006026][T11899] Tainted: [L]=SOFTLOCKUP
[  592.006032][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  592.006043][T11899] Call Trace:
[  592.006048][T11899]  <TASK>
[  592.006055][T11899]  dump_stack_lvl+0x100/0x190
[  592.006081][T11899]  should_fail_ex.cold+0x5/0xa
[  592.006104][T11899]  ? tomoyo_encode2+0xfb/0x3c0
[  592.006120][T11899]  should_failslab+0xc2/0x120
[  592.006137][T11899]  __kmalloc_noprof+0xe0/0x850
[  592.006160][T11899]  ? d_absolute_path+0x136/0x1b0
[  592.006189][T11899]  tomoyo_encode2+0xfb/0x3c0
[  592.006209][T11899]  tomoyo_encode+0x29/0x50
[  592.006225][T11899]  tomoyo_realpath_from_path+0x18c/0x690
[  592.006247][T11899]  tomoyo_path_number_perm+0x23c/0x580
[  592.006271][T11899]  ? tomoyo_path_number_perm+0x22e/0x580
[  592.006296][T11899]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  592.006345][T11899]  ? find_held_lock+0x2b/0x80
[  592.006371][T11899]  ? __fget_files+0x215/0x3d0
[  592.006387][T11899]  ? hook_file_ioctl_common+0x149/0x410
[  592.006405][T11899]  ? __fget_files+0x215/0x3d0
[  592.006427][T11899]  ? __fget_files+0x21f/0x3d0
[  592.006449][T11899]  security_file_ioctl+0xd3/0x230
[  592.006475][T11899]  __x64_sys_ioctl+0xb7/0x210
[  592.006503][T11899]  do_syscall_64+0x10b/0xf80
[  592.006526][T11899]  ? clear_bhb_loop+0x40/0x90
[  592.006546][T11899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.006564][T11899] RIP: 0033:0x7fc738d9c819
[  592.006578][T11899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.006593][T11899] RSP: 002b:00007fc739c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  592.006607][T11899] RAX: ffffffffffffffda RBX: 00007fc739016180 RCX: 00007fc738d9c819
[  592.006617][T11899] RDX: 00002000000000c0 RSI: 00000000c004500a RDI: 0000000000000003
[  592.006626][T11899] RBP: 00007fc739c52090 R08: 0000000000000000 R09: 0000000000000000
[  592.006636][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.006645][T11899] R13: 00007fc739016218 R14: 00007fc739016180 R15: 00007ffcabc55e38
[  592.006670][T11899]  </TASK>
[  592.006733][T11899] ERROR: Out of memory at tomoyo_realpath_from_path.
[  592.081721][ T9783] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  592.093101][T11903] fuse: Invalid rootmode
[  592.114842][ T9783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.114868][ T9783] usb 3-1: Product: syz
[  592.273078][   T30] audit: type=1400 audit(2000000000.750:329): avc:  denied  { bind } for  pid=11905 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  592.296939][T11906] usb usb9: usbfs: process 11906 (syz.0.1493) did not claim interface 0 before use
[  592.306885][   T30] audit: type=1400 audit(2000000000.750:330): avc:  denied  { name_bind } for  pid=11905 comm="syz.0.1493" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  592.328460][   T30] audit: type=1400 audit(2000000000.750:331): avc:  denied  { node_bind } for  pid=11905 comm="syz.0.1493" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  592.410753][ T9783] usb 3-1: Manufacturer: syz
[  592.425358][ T5965] usb 2-1: USB disconnect, device number 70
[  592.475332][ T9783] usb 3-1: SerialNumber: syz
[  592.504999][ T9783] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  592.520160][   T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  592.899937][T10623] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  592.937873][T10623] ath9k_htc: Failed to initialize the device
[  592.962906][ T5965] usb 2-1: ath9k_htc: USB layer deinitialized
[  593.105754][    T9] usb 3-1: USB disconnect, device number 51
[  593.147575][   T30] audit: type=1400 audit(2000000001.660:332): avc:  denied  { setcurrent } for  pid=11918 comm="syz.1.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  593.238406][   T30] audit: type=1401 audit(2000000001.680:333): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[  593.526676][T11921] warning: `syz.1.1497' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  593.664932][   T29] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  593.691196][   T29] ath9k_htc: Failed to initialize the device
[  593.758187][    T9] usb 3-1: ath9k_htc: USB layer deinitialized
[  594.190959][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'.
[  594.389310][T10623] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  594.569512][T10623] usb 2-1: Using ep0 maxpacket: 16
[  594.592339][T10623] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  594.602399][T10623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.627179][T10623] usb 2-1: Product: syz
[  594.640467][T10623] usb 2-1: Manufacturer: syz
[  594.654783][T10623] usb 2-1: SerialNumber: syz
[  594.695234][T10623] usb 2-1: config 0 descriptor??
[  594.710971][T10623] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  595.069527][   T30] audit: type=1400 audit(2000000003.580:334): avc:  denied  { watch watch_reads } for  pid=11933 comm="syz.0.1500" path="/298/file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  595.469621][T10623] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110
[  595.777970][T11941] overlayfs: missing 'lowerdir'
[  595.940704][   T30] audit: type=1400 audit(2000000004.460:335): avc:  denied  { write } for  pid=11940 comm="syz.0.1503" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  596.159314][ T5897] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  596.856003][   T30] audit: type=1400 audit(2000000005.370:336): avc:  denied  { getopt } for  pid=11953 comm="syz.0.1506" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  596.882765][   T30] audit: type=1400 audit(2000000005.400:337): avc:  denied  { create } for  pid=11953 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  596.933258][T11960] FAULT_INJECTION: forcing a failure.
[  596.933258][T11960] name failslab, interval 1, probability 0, space 0, times 0
[  596.967671][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz.4.1507 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  596.967700][T11960] Tainted: [L]=SOFTLOCKUP
[  596.967706][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  596.967715][T11960] Call Trace:
[  596.967721][T11960]  <TASK>
[  596.967728][T11960]  dump_stack_lvl+0x100/0x190
[  596.967752][T11960]  should_fail_ex.cold+0x5/0xa
[  596.967775][T11960]  ? tomoyo_encode2+0xfb/0x3c0
[  596.967790][T11960]  should_failslab+0xc2/0x120
[  596.967807][T11960]  __kmalloc_noprof+0xe0/0x850
[  596.967828][T11960]  ? d_absolute_path+0x136/0x1b0
[  596.967862][T11960]  tomoyo_encode2+0xfb/0x3c0
[  596.967881][T11960]  tomoyo_encode+0x29/0x50
[  596.967896][T11960]  tomoyo_realpath_from_path+0x18c/0x690
[  596.967918][T11960]  tomoyo_path_number_perm+0x23c/0x580
[  596.967941][T11960]  ? tomoyo_path_number_perm+0x22e/0x580
[  596.967964][T11960]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  596.968011][T11960]  ? find_held_lock+0x2b/0x80
[  596.968040][T11960]  ? __fget_files+0x215/0x3d0
[  596.968058][T11960]  ? hook_file_ioctl_common+0x149/0x410
[  596.968076][T11960]  ? __fget_files+0x215/0x3d0
[  596.968097][T11960]  ? __fget_files+0x21f/0x3d0
[  596.968116][T11960]  security_file_ioctl+0xd3/0x230
[  596.968142][T11960]  __x64_sys_ioctl+0xb7/0x210
[  596.968169][T11960]  do_syscall_64+0x10b/0xf80
[  596.968192][T11960]  ? clear_bhb_loop+0x40/0x90
[  596.968214][T11960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.968230][T11960] RIP: 0033:0x7ff760f9c819
[  596.968243][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.968259][T11960] RSP: 002b:00007ff761f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  596.968275][T11960] RAX: ffffffffffffffda RBX: 00007ff761215fa0 RCX: 00007ff760f9c819
[  596.968285][T11960] RDX: 0000000000000005 RSI: 0000000000006f2d RDI: 0000000000000004
[  596.968295][T11960] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  596.968305][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.968314][T11960] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  596.968337][T11960]  </TASK>
[  596.968407][T11960] ERROR: Out of memory at tomoyo_realpath_from_path.
[  597.033023][   T30] audit: type=1400 audit(2000000005.540:338): avc:  denied  { ioctl } for  pid=11959 comm="syz.4.1507" path="socket:[43124]" dev="sockfs" ino=43124 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  597.911117][T11975] dns_resolver: Unsupported content type (152)
[  597.962911][T10623] usb 2-1: USB disconnect, device number 71
[  598.180266][   T30] audit: type=1400 audit(2000000006.700:339): avc:  denied  { create } for  pid=11984 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  598.223864][   T30] audit: type=1400 audit(2000000006.730:340): avc:  denied  { bind } for  pid=11984 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  598.542782][T11995] FAULT_INJECTION: forcing a failure.
[  598.542782][T11995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  598.556518][T11995] CPU: 0 UID: 0 PID: 11995 Comm: syz.3.1516 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  598.556546][T11995] Tainted: [L]=SOFTLOCKUP
[  598.556552][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  598.556562][T11995] Call Trace:
[  598.556569][T11995]  <TASK>
[  598.556576][T11995]  dump_stack_lvl+0x100/0x190
[  598.556601][T11995]  should_fail_ex.cold+0x5/0xa
[  598.556625][T11995]  _copy_from_user+0x2e/0xd0
[  598.556644][T11995]  move_addr_to_kernel+0x65/0x170
[  598.556666][T11995]  __sys_connect+0xb5/0x170
[  598.556689][T11995]  ? __pfx___sys_connect+0x10/0x10
[  598.556726][T11995]  ? exit_to_user_mode_loop+0xdd/0x4a0
[  598.556748][T11995]  ? rcu_is_watching+0x12/0xc0
[  598.556772][T11995]  ? exit_to_user_mode_loop+0xdd/0x4a0
[  598.556797][T11995]  __x64_sys_connect+0x72/0xb0
[  598.556819][T11995]  ? lockdep_hardirqs_on+0x78/0x100
[  598.556843][T11995]  do_syscall_64+0x10b/0xf80
[  598.556866][T11995]  ? clear_bhb_loop+0x40/0x90
[  598.556887][T11995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.556904][T11995] RIP: 0033:0x7fc738d9c819
[  598.556919][T11995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.556935][T11995] RSP: 002b:00007fc739c52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  598.556952][T11995] RAX: ffffffffffffffda RBX: 00007fc739016180 RCX: 00007fc738d9c819
[  598.556963][T11995] RDX: 0000000000000010 RSI: 0000200000004cc0 RDI: 000000000000000c
[  598.556973][T11995] RBP: 00007fc739c52090 R08: 0000000000000000 R09: 0000000000000000
[  598.556984][T11995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.556994][T11995] R13: 00007fc739016218 R14: 00007fc739016180 R15: 00007ffcabc55e38
[  598.557017][T11995]  </TASK>
[  598.863879][T11994] syzkaller0: entered promiscuous mode
[  599.469683][ T5897] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  599.619098][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  599.670739][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  599.692173][ T5897] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40
[  599.709220][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.748077][ T5897] usb 4-1: Product: syz
[  599.758492][ T5897] usb 4-1: Manufacturer: syz
[  599.765602][ T5897] usb 4-1: SerialNumber: syz
[  600.012176][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  600.043284][ T5897] usb 4-1: MIDIStreaming interface descriptor not found
[  601.115880][   T30] audit: type=1400 audit(2000000009.630:341): avc:  denied  { read } for  pid=12019 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  601.167066][   T30] audit: type=1400 audit(2000000009.680:342): avc:  denied  { write } for  pid=12019 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  601.195195][T12020] lo speed is unknown, defaulting to 1000
[  601.216192][T12020] lo speed is unknown, defaulting to 1000
[  601.226692][T12020] lo speed is unknown, defaulting to 1000
[  601.349430][T12024] ubi: mtd0 is already attached to ubi16
[  601.584770][ T5897] usb 4-1: USB disconnect, device number 58
[  601.680469][T12024] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  601.687082][T12024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  601.729291][    T9] usb 3-1: new low-speed USB device number 52 using dummy_hcd
[  601.835730][T12024] vhci_hcd vhci_hcd.0: Device attached
[  602.385859][  T798] lo speed is unknown, defaulting to 1000
[  602.407384][T12020] infiniband syz0: set active
[  602.413342][ T5897] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  602.425531][T12020] infiniband syz0: added lo
[  602.445599][T12020] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  602.452175][T12020] infiniband syz0: Couldn't open port 1
[  602.472024][T12020] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  602.487754][T12020] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  602.504953][T10623] usb 37-1: new low-speed USB device number 12 using vhci_hcd
[  602.513912][T12020] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  602.514570][    T9] usb 3-1: config 0 has no interfaces?
[  602.532793][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  602.543697][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.554443][    T9] usb 3-1: config 0 descriptor??
[  602.569971][T12020] RDS/IB: syz0: added
[  602.575126][T12020] smc: adding ib device syz0 with port count 1
[  602.582344][T12020] smc:    ib device syz0 port 1 has no pnetid
[  602.591189][  T798] lo speed is unknown, defaulting to 1000
[  602.607532][ T5897] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  602.621012][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.631317][T12020] lo speed is unknown, defaulting to 1000
[  602.639255][ T5897] usb 4-1: Product: syz
[  602.648027][ T5897] usb 4-1: Manufacturer: syz
[  602.659633][ T5897] usb 4-1: SerialNumber: syz
[  602.677242][ T5897] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  602.699439][  T798] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  602.863883][    T9] usb 3-1: USB disconnect, device number 52
[  602.870405][T12025] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 12
[  602.900943][ T8933] vhci_hcd vhci_hcd.2: stop threads
[  602.920257][ T8933] vhci_hcd vhci_hcd.2: release socket
[  602.952211][ T8933] vhci_hcd vhci_hcd.2: disconnect device
[  603.121123][T12020] lo speed is unknown, defaulting to 1000
[  603.280203][ T5897] usb 4-1: USB disconnect, device number 59
[  603.381376][T12020] lo speed is unknown, defaulting to 1000
[  603.456016][   T30] audit: type=1400 audit(2000000011.970:343): avc:  denied  { create } for  pid=12039 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  603.486715][   T30] audit: type=1400 audit(2000000012.000:344): avc:  denied  { read } for  pid=12039 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  603.554415][T12020] lo speed is unknown, defaulting to 1000
[  603.640008][T12020] lo speed is unknown, defaulting to 1000
[  603.779434][  T798] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  603.799784][T12044] ubi: mtd0 is already attached to ubi16
[  603.820994][T12044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  603.827611][T12044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  603.837863][T12044] vhci_hcd vhci_hcd.0: Device attached
[  603.938777][  T798] ath9k_htc: Failed to initialize the device
[  604.045287][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'.
[  604.060912][ T5897] usb 4-1: ath9k_htc: USB layer deinitialized
[  604.070559][T12041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1528'.
[  604.179523][    T9] usb 3-1: new low-speed USB device number 53 using dummy_hcd
[  604.243192][   T30] audit: type=1804 audit(2000000012.760:345): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1530" name="/newroot/313/file0" dev="tmpfs" ino=1662 res=1 errno=0
[  604.480349][T12020] lo speed is unknown, defaulting to 1000
[  604.589555][    T9] usb 3-1: device descriptor read/64, error -71
[  604.602441][   T30] audit: type=1400 audit(2000000013.120:346): avc:  denied  { mounton } for  pid=12052 comm="syz.3.1531" path="/314/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  605.049656][   T30] audit: type=1400 audit(2000000013.540:347): avc:  denied  { name_connect } for  pid=12057 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  605.369303][    T9] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[  605.919405][    T9] usb 3-1: device descriptor read/64, error -71
[  606.030180][    T9] usb usb3-port1: attempt power cycle
[  606.082605][T12074] openvswitch: netlink: Message has 592 unknown bytes.
[  606.092823][T12074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.239286][  T798] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  606.267038][T12081] lo speed is unknown, defaulting to 1000
[  606.380632][    T9] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  606.409931][    T9] usb 3-1: device descriptor read/8, error -71
[  606.419287][  T798] usb 4-1: Using ep0 maxpacket: 16
[  606.431531][  T798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.452345][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  606.475563][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  606.492870][  T798] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  606.503990][  T798] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  606.524675][  T798] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  606.540334][  T798] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  606.563548][  T798] usb 4-1: Manufacturer: syz
[  606.580840][  T798] usb 4-1: config 0 descriptor??
[  606.649445][    T9] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  606.680555][    T9] usb 3-1: device descriptor read/8, error -71
[  606.767134][T12045] vhci_hcd: connection closed
[  606.767402][   T12] vhci_hcd vhci_hcd.2: stop threads
[  606.792694][   T12] vhci_hcd vhci_hcd.2: release socket
[  606.803569][    T9] usb usb3-port1: unable to enumerate USB device
[  606.816353][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  606.879282][  T798] rc_core: IR keymap rc-hauppauge not found
[  606.905176][  T798] Registered IR keymap rc-empty
[  606.924990][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.051060][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.178848][T12114] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  607.196717][   T30] audit: type=1400 audit(2000000015.680:348): avc:  denied  { bind } for  pid=12108 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  607.238974][  T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  607.279856][   T30] audit: type=1400 audit(2000000015.690:349): avc:  denied  { write } for  pid=12108 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  607.351328][  T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  607.367784][T12113] input: syz0 as /devices/virtual/input/input14
[  607.438035][   T30] audit: type=1400 audit(2000000015.950:350): avc:  denied  { read } for  pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=3447 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  607.513551][   T30] audit: type=1400 audit(2000000015.950:351): avc:  denied  { open } for  pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3447 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  607.597809][   T30] audit: type=1400 audit(2000000015.950:352): avc:  denied  { ioctl } for  pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3447 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  607.629711][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.651704][T10623] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  607.671889][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.691207][   T30] audit: type=1400 audit(2000000016.090:353): avc:  denied  { sqpoll } for  pid=12121 comm="syz.0.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  607.724775][   T30] audit: type=1400 audit(2000000016.190:354): avc:  denied  { lock } for  pid=12121 comm="syz.0.1540" path="socket:[44496]" dev="sockfs" ino=44496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  607.749473][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.774968][T12126] FAULT_INJECTION: forcing a failure.
[  607.774968][T12126] name failslab, interval 1, probability 0, space 0, times 0
[  607.789357][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.809387][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  607.824353][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.4.1541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  607.824382][T12126] Tainted: [L]=SOFTLOCKUP
[  607.824388][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  607.824396][T12126] Call Trace:
[  607.824402][T12126]  <TASK>
[  607.824409][T12126]  dump_stack_lvl+0x100/0x190
[  607.824435][T12126]  should_fail_ex.cold+0x5/0xa
[  607.824466][T12126]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  607.824491][T12126]  should_failslab+0xc2/0x120
[  607.824509][T12126]  __kmalloc_noprof+0xe0/0x850
[  607.824532][T12126]  ? lockdep_hardirqs_on+0x78/0x100
[  607.824563][T12126]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  607.824590][T12126]  genl_family_rcv_msg_doit+0xc7/0x300
[  607.824614][T12126]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  607.824634][T12126]  ? genl_get_cmd+0x3e7/0x760
[  607.824661][T12126]  ? __dev_queue_xmit+0xa10/0x4950
[  607.824682][T12126]  ? __radix_tree_lookup+0x217/0x2b0
[  607.824706][T12126]  genl_rcv_msg+0x560/0x800
[  607.824732][T12126]  ? __pfx_genl_rcv_msg+0x10/0x10
[  607.824754][T12126]  ? __pfx_devlink_nl_pre_doit+0x10/0x10
[  607.824772][T12126]  ? __pfx_devlink_nl_get_doit+0x10/0x10
[  607.824791][T12126]  ? __pfx_devlink_nl_post_doit+0x10/0x10
[  607.824819][T12126]  netlink_rcv_skb+0x159/0x420
[  607.824837][T12126]  ? __pfx_genl_rcv_msg+0x10/0x10
[  607.824859][T12126]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  607.824886][T12126]  ? netlink_deliver_tap+0x1ae/0xcc0
[  607.824907][T12126]  genl_rcv+0x28/0x40
[  607.824926][T12126]  netlink_unicast+0x585/0x850
[  607.824948][T12126]  ? __pfx_netlink_unicast+0x10/0x10
[  607.824971][T12126]  netlink_sendmsg+0x8b0/0xda0
[  607.824994][T12126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  607.825010][T12126]  ? __might_fault+0x80/0x140
[  607.825040][T12126]  ____sys_sendmsg+0x9e1/0xb70
[  607.825056][T12126]  ? __pfx_netlink_sendmsg+0x10/0x10
[  607.825077][T12126]  ? __pfx_____sys_sendmsg+0x10/0x10
[  607.825105][T12126]  ___sys_sendmsg+0x190/0x1e0
[  607.825125][T12126]  ? __pfx____sys_sendmsg+0x10/0x10
[  607.825156][T12126]  __sys_sendmsg+0x170/0x220
[  607.825172][T12126]  ? __pfx___sys_sendmsg+0x10/0x10
[  607.825199][T12126]  ? rcu_is_watching+0x12/0xc0
[  607.825225][T12126]  do_syscall_64+0x10b/0xf80
[  607.825246][T12126]  ? clear_bhb_loop+0x40/0x90
[  607.825266][T12126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.825280][T12126] RIP: 0033:0x7ff760f9c819
[  607.825290][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.825301][T12126] RSP: 002b:00007ff761f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  607.825312][T12126] RAX: ffffffffffffffda RBX: 00007ff761215fa0 RCX: 00007ff760f9c819
[  607.825319][T12126] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000003
[  607.825325][T12126] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  607.825331][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  607.825336][T12126] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  607.825357][T12126]  </TASK>
[  607.835632][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  608.179366][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  608.209784][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  608.229570][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  608.269360][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  608.362345][  T798] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  608.372510][  T798] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  608.396219][  T798] usb 4-1: USB disconnect, device number 60
[  608.507107][T12142] overlayfs: missing 'lowerdir'
[  609.059070][T10623] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  609.159441][T10790] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  609.222979][T10623] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  609.245438][T10623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.263324][T10623] usb 4-1: Product: syz
[  609.272654][T10623] usb 4-1: Manufacturer: syz
[  609.282460][T10623] usb 4-1: SerialNumber: syz
[  609.300495][T10623] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  609.320339][ T5965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  609.332941][T10790] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  609.363441][T12152] FAULT_INJECTION: forcing a failure.
[  609.363441][T12152] name failslab, interval 1, probability 0, space 0, times 0
[  609.364554][T10790] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  609.386730][T12152] CPU: 1 UID: 0 PID: 12152 Comm: syz.4.1550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  609.386756][T12152] Tainted: [L]=SOFTLOCKUP
[  609.386761][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  609.386770][T12152] Call Trace:
[  609.386776][T12152]  <TASK>
[  609.386781][T12152]  dump_stack_lvl+0x100/0x190
[  609.386806][T12152]  should_fail_ex.cold+0x5/0xa
[  609.386828][T12152]  should_failslab+0xc2/0x120
[  609.386844][T12152]  __kmalloc_cache_noprof+0x7a/0x6f0
[  609.386863][T12152]  ? binder_transaction+0x748/0x9e50
[  609.386885][T12152]  binder_transaction+0x748/0x9e50
[  609.386904][T12152]  ? find_held_lock+0x2b/0x80
[  609.386933][T12152]  ? __lock_acquire+0x4a5/0x2630
[  609.386963][T12152]  ? __pfx_binder_transaction+0x10/0x10
[  609.386984][T12152]  ? __lock_acquire+0x4a5/0x2630
[  609.387013][T12152]  ? find_held_lock+0x2b/0x80
[  609.387037][T12152]  ? is_bpf_text_address+0x8a/0x1a0
[  609.387058][T12152]  ? is_bpf_text_address+0x8a/0x1a0
[  609.387076][T12152]  ? bpf_ksym_find+0x128/0x1c0
[  609.387098][T12152]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  609.387116][T12152]  ? is_bpf_text_address+0x94/0x1a0
[  609.387136][T12152]  ? kernel_text_address+0x8d/0x100
[  609.387156][T12152]  ? find_held_lock+0x2b/0x80
[  609.387184][T12152]  ? __lock_acquire+0x4a5/0x2630
[  609.387203][T12152]  ? __lock_acquire+0x4a5/0x2630
[  609.387231][T12152]  ? find_held_lock+0x2b/0x80
[  609.387252][T12152]  ? __might_fault+0xc5/0x140
[  609.387273][T12152]  ? __might_fault+0xc5/0x140
[  609.387303][T12152]  binder_thread_write+0x1303/0x4db0
[  609.387330][T12152]  ? __lock_acquire+0x4a5/0x2630
[  609.387349][T12152]  ? __pfx_binder_thread_write+0x10/0x10
[  609.387368][T12152]  ? binder_debug+0xe0/0x190
[  609.387444][T12152]  ? __pfx_binder_debug+0x10/0x10
[  609.387478][T12152]  ? binder_debug+0xe0/0x190
[  609.387505][T12152]  ? __pfx_binder_debug+0x10/0x10
[  609.387548][T12152]  binder_ioctl+0x28f8/0x7550
[  609.387580][T12152]  ? tomoyo_path_number_perm+0x188/0x580
[  609.387616][T12152]  ? __pfx_binder_ioctl+0x10/0x10
[  609.387648][T12152]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  609.387674][T12152]  ? do_vfs_ioctl+0x226/0x13e0
[  609.387703][T12152]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  609.387728][T12152]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  609.387762][T12152]  ? hook_file_ioctl_common+0x149/0x410
[  609.387787][T12152]  ? selinux_file_ioctl+0x13b/0x290
[  609.387816][T12152]  ? selinux_file_ioctl+0xb6/0x290
[  609.387848][T12152]  ? __pfx_binder_ioctl+0x10/0x10
[  609.387866][T12152]  __x64_sys_ioctl+0x18e/0x210
[  609.387890][T12152]  do_syscall_64+0x10b/0xf80
[  609.387909][T12152]  ? clear_bhb_loop+0x40/0x90
[  609.387925][T12152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.387939][T12152] RIP: 0033:0x7ff760f9c819
[  609.387952][T12152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.387965][T12152] RSP: 002b:00007ff761f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  609.387981][T12152] RAX: ffffffffffffffda RBX: 00007ff761215fa0 RCX: 00007ff760f9c819
[  609.387992][T12152] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004
[  609.388001][T12152] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  609.388010][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.388017][T12152] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  609.388035][T12152]  </TASK>
[  609.398465][T10790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.616656][T12156] lo speed is unknown, defaulting to 1000
[  609.665328][T10790] usb 1-1: Product: syz
[  609.811350][T10790] usb 1-1: Manufacturer: syz
[  609.816075][T10790] usb 1-1: SerialNumber: syz
[  609.836837][T10790] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  609.912279][ T5897] usb 4-1: USB disconnect, device number 61
[  610.058023][T12161] capability: warning: `syz.2.1553' uses 32-bit capabilities (legacy support in use)
[  610.081457][   T30] audit: type=1400 audit(2000000018.590:355): avc:  denied  { getopt } for  pid=12162 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  610.296683][T12163] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1552'.
[  610.350104][T10790] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  610.362700][   T30] audit: type=1400 audit(2000000018.880:356): avc:  denied  { append } for  pid=12149 comm="syz.0.1549" name="i2c-1" dev="devtmpfs" ino=3453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  610.369504][T10790] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  611.067857][ T5965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  611.078212][T10790] usb 1-1: media controller created
[  611.085411][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.095090][ T5965] ath9k_htc: Failed to initialize the device
[  611.108379][   T30] audit: type=1400 audit(2000000018.970:357): avc:  denied  { write } for  pid=12164 comm="syz.2.1554" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  611.132364][ T5897] usb 4-1: ath9k_htc: USB layer deinitialized
[  611.142644][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.179702][T10790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  611.243750][T12150] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  611.261714][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'.
[  611.539973][T12179] lo speed is unknown, defaulting to 1000
[  612.957049][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  612.957063][   T30] audit: type=1400 audit(2000000021.470:363): avc:  denied  { name_bind } for  pid=12188 comm="syz.3.1558" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  613.000483][ T5897] usb 1-1: USB disconnect, device number 52
[  613.020869][   T30] audit: type=1400 audit(2000000021.500:364): avc:  denied  { node_bind } for  pid=12188 comm="syz.3.1558" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  613.089756][   T30] audit: type=1400 audit(2000000021.520:365): avc:  denied  { read write } for  pid=5811 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  613.133480][   T30] audit: type=1400 audit(2000000021.520:366): avc:  denied  { open } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  613.204082][   T30] audit: type=1400 audit(2000000021.520:367): avc:  denied  { ioctl } for  pid=5811 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  613.232215][   T30] audit: type=1400 audit(2000000021.690:368): avc:  denied  { execmem } for  pid=12191 comm="syz.3.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  613.252138][   T30] audit: type=1400 audit(2000000021.750:369): avc:  denied  { prog_load } for  pid=12194 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  613.273239][   T30] audit: type=1400 audit(2000000021.750:370): avc:  denied  { bpf } for  pid=12194 comm="syz.0.1561" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  613.459430][   T30] audit: type=1400 audit(2000000021.750:371): avc:  denied  { perfmon } for  pid=12194 comm="syz.0.1561" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  613.481679][   T30] audit: type=1400 audit(2000000021.760:372): avc:  denied  { open } for  pid=12194 comm="syz.0.1561" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  613.677636][T12206] lo speed is unknown, defaulting to 1000
[  615.301956][T12216] FAULT_INJECTION: forcing a failure.
[  615.301956][T12216] name failslab, interval 1, probability 0, space 0, times 0
[  615.379299][T12216] CPU: 1 UID: 0 PID: 12216 Comm: syz.0.1565 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  615.379333][T12216] Tainted: [L]=SOFTLOCKUP
[  615.379339][T12216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  615.379356][T12216] Call Trace:
[  615.379362][T12216]  <TASK>
[  615.379369][T12216]  dump_stack_lvl+0x100/0x190
[  615.379396][T12216]  should_fail_ex.cold+0x5/0xa
[  615.379420][T12216]  ? tomoyo_realpath_from_path+0xb6/0x690
[  615.379439][T12216]  should_failslab+0xc2/0x120
[  615.379457][T12216]  __kmalloc_noprof+0xe0/0x850
[  615.379480][T12216]  ? kfree+0x1dd/0x6c0
[  615.379504][T12216]  tomoyo_realpath_from_path+0xb6/0x690
[  615.379528][T12216]  tomoyo_path_number_perm+0x23c/0x580
[  615.379551][T12216]  ? tomoyo_path_number_perm+0x22e/0x580
[  615.379580][T12216]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  615.379602][T12216]  ? trace_sched_exit_tp+0x11c/0x160
[  615.379646][T12216]  ? find_held_lock+0x2b/0x80
[  615.379672][T12216]  ? __fget_files+0x215/0x3d0
[  615.379689][T12216]  ? hook_file_ioctl_common+0x149/0x410
[  615.379707][T12216]  ? __fget_files+0x215/0x3d0
[  615.379729][T12216]  ? __fget_files+0x21f/0x3d0
[  615.379751][T12216]  security_file_ioctl+0xd3/0x230
[  615.379778][T12216]  __x64_sys_ioctl+0xb7/0x210
[  615.379806][T12216]  do_syscall_64+0x10b/0xf80
[  615.379829][T12216]  ? clear_bhb_loop+0x40/0x90
[  615.379852][T12216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.379870][T12216] RIP: 0033:0x7fb9c279c819
[  615.379885][T12216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  615.379899][T12216] RSP: 002b:00007fb9c3579028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  615.379917][T12216] RAX: ffffffffffffffda RBX: 00007fb9c2a15fa0 RCX: 00007fb9c279c819
[  615.379928][T12216] RDX: 0000200000000100 RSI: 000000004008af60 RDI: 0000000000000003
[  615.379939][T12216] RBP: 00007fb9c3579090 R08: 0000000000000000 R09: 0000000000000000
[  615.379949][T12216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  615.379958][T12216] R13: 00007fb9c2a16038 R14: 00007fb9c2a15fa0 R15: 00007fff40e91e78
[  615.379982][T12216]  </TASK>
[  615.382420][T12216] ERROR: Out of memory at tomoyo_realpath_from_path.
[  615.595142][ T5136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  615.652124][ T5136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  615.662767][ T5136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  615.672356][ T5136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  615.696591][ T5136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  615.912450][T12212] lo speed is unknown, defaulting to 1000
[  617.804207][ T5136] Bluetooth: hci5: command tx timeout
[  618.047493][T12256] EXT4-fs (nbd0): unable to read superblock
[  618.056129][   T30] kauditd_printk_skb: 48 callbacks suppressed
[  618.056161][   T30] audit: type=1400 audit(2000000026.560:421): avc:  denied  { mounton } for  pid=12243 comm="syz.0.1572" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  618.248433][   T30] audit: type=1400 audit(2000000026.710:422): avc:  denied  { create } for  pid=12259 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  618.298512][   T30] audit: type=1400 audit(2000000026.710:423): avc:  denied  { getopt } for  pid=12259 comm="syz.2.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  618.330284][T12212] chnl_net:caif_netlink_parms(): no params data found
[  618.377891][   T30] audit: type=1400 audit(2000000026.840:424): avc:  denied  { setopt } for  pid=12249 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  618.446050][   T30] audit: type=1400 audit(2000000026.840:425): avc:  denied  { bind } for  pid=12249 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  618.492211][   T30] audit: type=1400 audit(2000000026.840:426): avc:  denied  { name_bind } for  pid=12249 comm="syz.4.1574" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  618.515869][   T30] audit: type=1400 audit(2000000026.840:427): avc:  denied  { node_bind } for  pid=12249 comm="syz.4.1574" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  618.539933][  T798] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  618.588450][   T30] audit: type=1400 audit(2000000026.850:428): avc:  denied  { write } for  pid=12249 comm="syz.4.1574" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  618.636970][   T30] audit: type=1400 audit(2000000026.850:429): avc:  denied  { name_connect } for  pid=12249 comm="syz.4.1574" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  618.693035][   T30] audit: type=1400 audit(2000000026.890:430): avc:  denied  { prog_run } for  pid=12263 comm="syz.3.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  618.702762][T12212] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.720387][T12212] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.727610][T12212] bridge_slave_0: entered allmulticast mode
[  618.735498][T12212] bridge_slave_0: entered promiscuous mode
[  618.962774][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  618.986580][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  619.229085][  T798] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  619.238452][T12212] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.246224][  T798] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.257135][T12212] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.265941][  T798] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  619.270378][T12212] bridge_slave_1: entered allmulticast mode
[  619.275349][  T798] usb 3-1: config 1 has no interface number 1
[  619.286946][  T798] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  619.310958][T12212] bridge_slave_1: entered promiscuous mode
[  619.314598][  T798] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  619.343883][  T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.352996][  T798] usb 3-1: Product: syz
[  619.357216][  T798] usb 3-1: Manufacturer: syz
[  619.362845][  T798] usb 3-1: SerialNumber: syz
[  619.395959][T12212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.480036][T12212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.571404][T12212] team0: Port device team_slave_0 added
[  619.637447][T12212] team0: Port device team_slave_1 added
[  619.679622][ T5136] Bluetooth: hci2: unexpected event for opcode 0x1408
[  619.686029][  T798] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  619.727595][  T798] usb 3-1: MIDIStreaming interface descriptor not found
[  619.751522][T12212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.758484][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  619.851364][ T5136] Bluetooth: hci5: command tx timeout
[  619.905680][T12212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.919979][ T9783] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  619.927897][  T798] usb 3-1: USB disconnect, device number 57
[  620.112227][T12212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  620.166772][ T9783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.184439][T12212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.218506][ T9783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.280303][ T9783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  620.622327][T12212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  620.633699][ T9783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  620.662851][ T9783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.107132][ T9783] usb 1-1: config 0 descriptor??
[  621.190456][T12300] ubi: mtd0 is already attached to ubi16
[  621.201310][T12300] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  621.207910][T12300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  621.216064][T12300] vhci_hcd vhci_hcd.0: Device attached
[  622.477659][ T5136] Bluetooth: hci5: command tx timeout
[  622.548154][T12212] hsr_slave_0: entered promiscuous mode
[  622.593284][T12212] hsr_slave_1: entered promiscuous mode
[  622.609510][   T29] usb 37-1: new low-speed USB device number 13 using vhci_hcd
[  622.645215][T12212] debugfs: 'hsr0' already exists in 'hsr'
[  622.659545][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  622.681896][T12212] Cannot create hsr debugfs directory
[  622.700049][  T798] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  622.759498][ T9783] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  622.869432][  T798] usb 3-1: device descriptor read/64, error -71
[  623.026042][T10623] usb 1-1: USB disconnect, device number 53
[  623.139668][  T798] usb 3-1: new low-speed USB device number 59 using dummy_hcd
[  623.299915][  T798] usb 3-1: device descriptor read/64, error -71
[  623.307885][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  623.307898][   T30] audit: type=1400 audit(2000000031.820:458): avc:  denied  { sys_module } for  pid=12309 comm="syz.3.1589" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  623.381055][T12212] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  623.433636][  T798] usb usb3-port1: attempt power cycle
[  623.442226][T12212] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  623.465061][T12212] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  623.504192][T12212] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  623.536381][T12212] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  623.577370][T12212] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  623.604372][T12212] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  623.626273][T12212] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  623.724232][T12302] vhci_hcd: connection reset by peer
[  623.736726][   T36] vhci_hcd vhci_hcd.2: stop threads
[  623.757867][   T36] vhci_hcd vhci_hcd.2: release socket
[  623.766941][T12212] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.776711][   T30] audit: type=1400 audit(2000000032.270:459): avc:  denied  { execute } for  pid=12327 comm="syz.4.1590" path="/326/bus" dev="tmpfs" ino=1722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  623.787207][T12212] 8021q: adding VLAN 0 to HW filter on device team0
[  623.811071][   T36] vhci_hcd vhci_hcd.2: disconnect device
[  623.825489][T12328] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  623.832044][T12328] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  623.869841][T12331] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  623.882320][   T30] audit: type=1400 audit(2000000032.400:460): avc:  denied  { create } for  pid=12332 comm="syz.2.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  623.884019][T12328] vhci_hcd vhci_hcd.0: Device attached
[  623.963853][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.971046][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  624.005222][T12329] vhci_hcd: connection closed
[  624.005597][   T36] vhci_hcd vhci_hcd.4: stop threads
[  624.026872][   T30] audit: type=1400 audit(2000000032.520:461): avc:  denied  { watch } for  pid=12337 comm="syz.0.1593" path="/326/file1" dev="tmpfs" ino=1729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  624.052081][   T36] vhci_hcd vhci_hcd.4: release socket
[  624.062475][   T36] vhci_hcd vhci_hcd.4: disconnect device
[  624.072282][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.079456][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.089748][ T9783] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  624.098328][   T30] audit: type=1400 audit(2000000032.530:462): avc:  denied  { watch_sb } for  pid=12337 comm="syz.0.1593" path="/326/file1" dev="tmpfs" ino=1729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  624.163465][   T30] audit: type=1400 audit(2000000032.680:463): avc:  denied  { read } for  pid=12339 comm="syz.2.1594" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  624.240862][   T30] audit: type=1400 audit(2000000032.680:464): avc:  denied  { open } for  pid=12339 comm="syz.2.1594" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  624.300149][   T30] audit: type=1400 audit(2000000032.680:465): avc:  denied  { ioctl } for  pid=12339 comm="syz.2.1594" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  624.491860][ T5822] Bluetooth: hci5: command tx timeout
[  624.514635][T12349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1595'.
[  624.526335][   T30] audit: type=1400 audit(2000000033.040:466): avc:  denied  { create } for  pid=12348 comm="syz.2.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  624.604654][T12212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  624.670304][T12353] FAULT_INJECTION: forcing a failure.
[  624.670304][T12353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.701509][T12353] CPU: 0 UID: 0 PID: 12353 Comm: syz.4.1596 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  624.701544][T12353] Tainted: [L]=SOFTLOCKUP
[  624.701551][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  624.701562][T12353] Call Trace:
[  624.701568][T12353]  <TASK>
[  624.701575][T12353]  dump_stack_lvl+0x100/0x190
[  624.701601][T12353]  should_fail_ex.cold+0x5/0xa
[  624.701627][T12353]  copy_fpstate_to_sigframe+0x842/0xb00
[  624.701649][T12353]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  624.701681][T12353]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  624.701705][T12353]  ? posixtimer_deliver_signal+0x3c3/0x690
[  624.701733][T12353]  ? x86_task_fpu+0x5f/0x90
[  624.701768][T12353]  get_sigframe+0x3fb/0x940
[  624.701797][T12353]  ? __pfx_get_sigframe+0x10/0x10
[  624.701824][T12353]  ? siginfo_layout+0x156/0x290
[  624.701853][T12353]  x64_setup_rt_frame+0x12f/0xce0
[  624.701885][T12353]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  624.701913][T12353]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  624.701938][T12353]  ? kernel_write+0x643/0x6c0
[  624.701962][T12353]  ? __fget_files+0x215/0x3d0
[  624.701982][T12353]  arch_do_signal_or_restart+0x59e/0x7a0
[  624.702012][T12353]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  624.702048][T12353]  ? rcu_is_watching+0x12/0xc0
[  624.702077][T12353]  exit_to_user_mode_loop+0x86/0x4a0
[  624.702098][T12353]  ? do_syscall_64+0x52d/0xf80
[  624.702123][T12353]  do_syscall_64+0x706/0xf80
[  624.702145][T12353]  ? clear_bhb_loop+0x40/0x90
[  624.702166][T12353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.702184][T12353] RIP: 0033:0x7ff760f5d04e
[  624.702200][T12353] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  624.702216][T12353] RSP: 002b:00007ff761f11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  624.702235][T12353] RAX: 0000000000000001 RBX: 00007ff761f126c0 RCX: 00007ff760f5d04e
[  624.702246][T12353] RDX: 0000000000000001 RSI: 00007ff761f12090 RDI: 0000000000000003
[  624.702256][T12353] RBP: 00007ff761f12090 R08: 0000000000000000 R09: 0000000000000000
[  624.702266][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.702276][T12353] R13: 00007ff761216038 R14: 00007ff761215fa0 R15: 00007fffea802a48
[  624.702299][T12353]  </TASK>
[  624.999313][T10623] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  625.100015][T12212] veth0_vlan: entered promiscuous mode
[  625.116715][T12212] veth1_vlan: entered promiscuous mode
[  625.159340][T10623] usb 3-1: Using ep0 maxpacket: 32
[  625.166202][T10623] usb 3-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[  625.179750][T10623] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  625.189531][T10623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.197518][T10623] usb 3-1: Product: syz
[  625.214932][T10623] usb 3-1: Manufacturer: syz
[  625.225822][T12212] veth0_macvtap: entered promiscuous mode
[  625.232280][T10623] usb 3-1: SerialNumber: syz
[  625.242118][T10623] usb 3-1: config 0 descriptor??
[  625.256991][T12212] veth1_macvtap: entered promiscuous mode
[  625.265381][T10623] cdc_ether 3-1:0.0: Descriptor too short
[  625.273917][T10623] usb 3-1: unsupported MDLM descriptors
[  625.321686][T12212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  625.373255][T12212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  625.390303][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  625.402753][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  625.436581][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  625.452942][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  625.973879][   T30] audit: type=1400 audit(2000000034.120:467): avc:  denied  { read write } for  pid=12363 comm="syz.0.1598" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  626.019300][ T9783] usb 3-1: USB disconnect, device number 61
[  626.770496][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  626.852210][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.864751][T12377] ubi: mtd0 is already attached to ubi16
[  627.155619][T12377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  627.162238][T12377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  627.205772][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.226037][T12377] vhci_hcd vhci_hcd.0: Device attached
[  627.245585][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.359105][T10623] usb 1-1: new low-speed USB device number 54 using dummy_hcd
[  627.473166][T10790] usb 33-1: new low-speed USB device number 14 using vhci_hcd
[  627.590665][T10623] usb 1-1: no configurations
[  627.609238][T10623] usb 1-1: can't read configurations, error -22
[  627.663492][T12386] syzkaller0: entered promiscuous mode
[  627.683831][T12386] 0: reclassify loop, rule prio 0, protocol 800
[  627.769329][   T29] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  627.779296][T10623] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[  627.884486][T12382] FAULT_INJECTION: forcing a failure.
[  627.884486][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.904154][T12382] CPU: 1 UID: 0 PID: 12382 Comm: syz.2.1601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  627.904182][T12382] Tainted: [L]=SOFTLOCKUP
[  627.904189][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  627.904200][T12382] Call Trace:
[  627.904206][T12382]  <TASK>
[  627.904216][T12382]  dump_stack_lvl+0x100/0x190
[  627.904242][T12382]  should_fail_ex.cold+0x5/0xa
[  627.904267][T12382]  _copy_to_user+0x32/0xd0
[  627.904293][T12382]  simple_read_from_buffer+0xcb/0x170
[  627.904314][T12382]  proc_fail_nth_read+0x1af/0x230
[  627.904341][T12382]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  627.904369][T12382]  ? rw_verify_area+0xce/0x6d0
[  627.904391][T12382]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  627.904415][T12382]  vfs_read+0x1e4/0xb30
[  627.904443][T12382]  ? __pfx_vfs_read+0x10/0x10
[  627.904467][T12382]  ? __fget_files+0x215/0x3d0
[  627.904491][T12382]  ? __fget_files+0x21f/0x3d0
[  627.904517][T12382]  ksys_read+0x12a/0x250
[  627.904541][T12382]  ? __pfx_ksys_read+0x10/0x10
[  627.904566][T12382]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  627.904594][T12382]  ? syscall_user_dispatch+0x76/0x130
[  627.904622][T12382]  do_syscall_64+0x10b/0xf80
[  627.904645][T12382]  ? clear_bhb_loop+0x40/0x90
[  627.904667][T12382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.904684][T12382] RIP: 0033:0x7fe8b435d04e
[  627.904700][T12382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  627.904716][T12382] RSP: 002b:00007fe8b528dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  627.904734][T12382] RAX: ffffffffffffffda RBX: 00007fe8b528e6c0 RCX: 00007fe8b435d04e
[  627.904745][T12382] RDX: 000000000000000f RSI: 00007fe8b528e0a0 RDI: 0000000000000003
[  627.904756][T12382] RBP: 00007fe8b528e090 R08: 0000000000000000 R09: 0000000000000000
[  627.904766][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.904776][T12382] R13: 00007fe8b4616038 R14: 00007fe8b4615fa0 R15: 00007fff43f1e0d8
[  627.904800][T12382]  </TASK>
[  628.115152][T10623] usb 1-1: no configurations
[  628.120173][T10623] usb 1-1: can't read configurations, error -22
[  628.255849][T10623] usb usb1-port1: attempt power cycle
[  628.655145][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  628.655177][   T30] audit: type=1400 audit(2000000037.160:485): avc:  denied  { create } for  pid=12389 comm="syz.2.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  629.442688][   T30] audit: type=1400 audit(2000000037.170:486): avc:  denied  { connect } for  pid=12389 comm="syz.2.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  629.489291][T10623] usb 1-1: new low-speed USB device number 56 using dummy_hcd
[  629.510085][T10623] usb 1-1: no configurations
[  629.514701][T10623] usb 1-1: can't read configurations, error -22
[  629.660718][T10623] usb 1-1: new low-speed USB device number 57 using dummy_hcd
[  629.908152][T10623] usb 1-1: device descriptor read/8, error -71
[  629.933347][T12378] vhci_hcd: connection reset by peer
[  630.015794][ T7906] vhci_hcd vhci_hcd.0: stop threads
[  630.028136][   T30] audit: type=1400 audit(2000000038.540:487): avc:  denied  { map } for  pid=12397 comm="syz.2.1605" path="socket:[47160]" dev="sockfs" ino=47160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  630.120021][T10623] usb usb1-port1: unable to enumerate USB device
[  630.136260][ T7906] vhci_hcd vhci_hcd.0: release socket
[  630.147118][ T7906] vhci_hcd vhci_hcd.0: disconnect device
[  630.171016][   T30] audit: type=1400 audit(2000000038.690:488): avc:  denied  { audit_control } for  pid=12407 comm="syz.4.1607" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  630.291255][   T30] audit: type=1400 audit(2000000038.740:489): avc:  denied  { map } for  pid=12397 comm="syz.2.1605" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  630.379213][  T985] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  630.418397][   T30] audit: type=1400 audit(2000000038.880:490): avc:  denied  { create } for  pid=12407 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  630.475281][   T30] audit: type=1400 audit(2000000038.890:491): avc:  denied  { setopt } for  pid=12407 comm="syz.4.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  630.599304][T10623] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  630.950905][  T985] usb 6-1: Using ep0 maxpacket: 8
[  630.957716][  T985] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  630.966522][  T985] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  630.979282][  T985] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  630.989671][  T985] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  631.001616][  T985] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  631.041369][  T985] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  631.084492][  T985] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  631.107705][T10623] usb 1-1: config 0 has no interfaces?
[  631.114853][T10623] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  631.126830][  T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.141304][T10623] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  631.161763][T10623] usb 1-1: Manufacturer: syz
[  631.168412][  T985] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[  631.185886][T10623] usb 1-1: config 0 descriptor??
[  631.941075][   T30] audit: type=1400 audit(2000000040.460:492): avc:  denied  { map_create } for  pid=12425 comm="syz.4.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  631.982680][   T30] audit: type=1400 audit(2000000040.460:493): avc:  denied  { map_read map_write } for  pid=12425 comm="syz.4.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  632.004541][   T30] audit: type=1400 audit(2000000040.460:494): avc:  denied  { ioctl } for  pid=12409 comm="syz.0.1608" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  632.639536][T10790] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  633.237032][   T29] usb 6-1: USB disconnect, device number 2
[  633.250667][T12446] syzkaller0: entered promiscuous mode
[  633.399406][ T5897] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  633.993510][ T5897] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  634.008288][   T30] kauditd_printk_skb: 41 callbacks suppressed
[  634.008302][   T30] audit: type=1400 audit(2000000042.520:536): avc:  denied  { bind } for  pid=12450 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  634.042271][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.071644][ T5897] usb 5-1: Product: syz
[  634.088087][ T5897] usb 5-1: Manufacturer: syz
[  634.113924][ T5897] usb 5-1: SerialNumber: syz
[  634.136086][   T30] audit: type=1400 audit(2000000042.520:537): avc:  denied  { accept } for  pid=12450 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  634.176154][ T5897] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  634.197164][ T9783] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  634.239932][   T30] audit: type=1400 audit(2000000042.550:538): avc:  denied  { read } for  pid=12450 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  634.353606][   T30] audit: type=1400 audit(2000000042.590:539): avc:  denied  { create } for  pid=12450 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  634.392755][   T30] audit: type=1400 audit(2000000042.600:540): avc:  denied  { setopt } for  pid=12450 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  634.485884][   T30] audit: type=1400 audit(2000000042.700:541): avc:  denied  { firmware_load } for  pid=9783 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  634.580497][   T30] audit: type=1400 audit(2000000042.900:542): avc:  denied  { read write } for  pid=12459 comm="syz.3.1621" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  634.644013][   T30] audit: type=1400 audit(2000000042.900:543): avc:  denied  { open } for  pid=12459 comm="syz.3.1621" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  634.707720][   T30] audit: type=1400 audit(2000000042.900:544): avc:  denied  { ioctl } for  pid=12459 comm="syz.3.1621" path="/dev/video3" dev="devtmpfs" ino=936 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  634.749761][   T29] usb 1-1: USB disconnect, device number 58
[  634.784537][   T30] audit: type=1400 audit(2000000043.270:545): avc:  denied  { read } for  pid=12443 comm="syz.4.1616" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  634.795522][T10790] usb 5-1: USB disconnect, device number 67
[  635.036559][T12473] FAULT_INJECTION: forcing a failure.
[  635.036559][T12473] name failslab, interval 1, probability 0, space 0, times 0
[  635.108231][T12473] CPU: 1 UID: 0 PID: 12473 Comm: syz.5.1627 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.108252][T12473] Tainted: [L]=SOFTLOCKUP
[  635.108257][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  635.108266][T12473] Call Trace:
[  635.108273][T12473]  <TASK>
[  635.108279][T12473]  dump_stack_lvl+0x100/0x190
[  635.108305][T12473]  should_fail_ex.cold+0x5/0xa
[  635.108330][T12473]  should_failslab+0xc2/0x120
[  635.108348][T12473]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  635.108372][T12473]  ? do_getname+0x35/0x390
[  635.108395][T12473]  ? fput+0x79/0x100
[  635.108420][T12473]  do_getname+0x35/0x390
[  635.108443][T12473]  __x64_sys_unlinkat+0xa0/0x130
[  635.108465][T12473]  do_syscall_64+0x10b/0xf80
[  635.108488][T12473]  ? clear_bhb_loop+0x40/0x90
[  635.108511][T12473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.108529][T12473] RIP: 0033:0x7fae99f9c819
[  635.108545][T12473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.108562][T12473] RSP: 002b:00007fae9aef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  635.108581][T12473] RAX: ffffffffffffffda RBX: 00007fae9a215fa0 RCX: 00007fae99f9c819
[  635.108595][T12473] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  635.108605][T12473] RBP: 00007fae9aef5090 R08: 0000000000000000 R09: 0000000000000000
[  635.108614][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.108624][T12473] R13: 00007fae9a216038 R14: 00007fae9a215fa0 R15: 00007ffc8bd8d168
[  635.108647][T12473]  </TASK>
[  635.485450][ T9783] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  635.509494][ T9783] ath9k_htc: Failed to initialize the device
[  635.568156][T10790] usb 5-1: ath9k_htc: USB layer deinitialized
[  635.648411][T12481] lo speed is unknown, defaulting to 1000
[  635.909335][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  636.003932][T12488] FAULT_INJECTION: forcing a failure.
[  636.003932][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.056850][T12488] CPU: 1 UID: 0 PID: 12488 Comm: syz.3.1632 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  636.056881][T12488] Tainted: [L]=SOFTLOCKUP
[  636.056888][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  636.056898][T12488] Call Trace:
[  636.056904][T12488]  <TASK>
[  636.056910][T12488]  dump_stack_lvl+0x100/0x190
[  636.056927][T12488]  should_fail_ex.cold+0x5/0xa
[  636.056943][T12488]  _copy_from_user+0x2e/0xd0
[  636.056955][T12488]  __sys_bpf+0x243/0x4b90
[  636.056973][T12488]  ? __pfx___sys_bpf+0x10/0x10
[  636.056988][T12488]  ? proc_fail_nth_write+0x9f/0x220
[  636.057004][T12488]  ? find_held_lock+0x2b/0x80
[  636.057023][T12488]  ? find_held_lock+0x2b/0x80
[  636.057039][T12488]  ? ksys_write+0x190/0x250
[  636.057054][T12488]  ? ksys_write+0x190/0x250
[  636.057072][T12488]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  636.057088][T12488]  ? kernel_write+0x643/0x6c0
[  636.057104][T12488]  ? __fget_files+0x215/0x3d0
[  636.057123][T12488]  ? fput+0x79/0x100
[  636.057135][T12488]  ? ksys_write+0x1ac/0x250
[  636.057151][T12488]  ? __pfx_ksys_write+0x10/0x10
[  636.057169][T12488]  __x64_sys_bpf+0x7b/0xc0
[  636.057185][T12488]  ? lockdep_hardirqs_on+0x78/0x100
[  636.057199][T12488]  do_syscall_64+0x10b/0xf80
[  636.057213][T12488]  ? clear_bhb_loop+0x40/0x90
[  636.057233][T12488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.057250][T12488] RIP: 0033:0x7fc738d9c819
[  636.057260][T12488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.057271][T12488] RSP: 002b:00007fc739c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  636.057282][T12488] RAX: ffffffffffffffda RBX: 00007fc739015fa0 RCX: 00007fc738d9c819
[  636.057289][T12488] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  636.057295][T12488] RBP: 00007fc739c94090 R08: 0000000000000000 R09: 0000000000000000
[  636.057301][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.057307][T12488] R13: 00007fc739016038 R14: 00007fc739015fa0 R15: 00007ffcabc55e38
[  636.057321][T12488]  </TASK>
[  636.070558][    T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  636.283499][    T9] usb 6-1: config 0 has no interface number 0
[  636.348114][    T9] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  636.390989][    T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  636.435040][    T9] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  636.527404][    T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  636.562166][    T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  636.695163][    T9] usb 6-1: Product: syz
[  636.704255][    T9] usb 6-1: SerialNumber: syz
[  636.722170][    T9] usb 6-1: config 0 descriptor??
[  636.743869][    T9] cm109 6-1:0.8: invalid payload size 0, expected 4
[  636.763806][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input15
[  637.185968][    T9] ------------[ cut here ]------------
[  637.192173][    T9] URB ffff8880504b6000 submitted while active
[  637.199961][    T9] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#0: kworker/0:0/9
[  637.210680][    T9] Modules linked in:
[  637.215769][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  637.227000][    T9] Tainted: [L]=SOFTLOCKUP
[  637.231864][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  637.242537][    T9] Workqueue: usb_hub_wq hub_event
[  637.247599][    T9] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  637.253761][    T9] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 6d 1e b4 fa 48 8d 3d f6 3b 93 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  637.274049][    T9] RSP: 0018:ffffc900000e6e50 EFLAGS: 00010283
[  637.280578][    T9] RAX: 00000000000e59f4 RBX: ffff8880504b6000 RCX: ffffc9001de07000
[  637.282724][ T9783] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  637.289306][    T9] RDX: 0000000000100000 RSI: ffff8880504b6000 RDI: ffffffff90e886f0
[  637.289325][    T9] RBP: ffff8880503c5080 R08: 0000000000000000 R09: fffffbfff21b774a
[  637.289339][    T9] R10: ffffc900000e6ed8 R11: 0000000000000000 R12: ffff88807cb340a0
[  637.289351][    T9] R13: ffff88807cb34010 R14: ffff88807cb34050 R15: ffff88805693c2e0
[  637.289363][    T9] FS:  0000000000000000(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000
[  637.289382][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  637.289394][    T9] CR2: 000020000016b030 CR3: 0000000056113000 CR4: 00000000003526f0
[  637.289406][    T9] Call Trace:
[  637.289414][    T9]  <TASK>
[  637.289423][    T9]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  637.367673][    T9]  ? __pm_runtime_resume+0xc3/0x170
[  637.373587][    T9]  cm109_input_open+0x273/0x420
[  637.378527][    T9]  ? __pfx_cm109_input_open+0x10/0x10
[  637.384365][    T9]  input_open_device+0x24c/0x3d0
[  637.389798][    T9]  kbd_connect+0x124/0x180
[  637.394227][    T9]  input_attach_handler.isra.0+0x177/0x1e0
[  637.400567][    T9]  input_register_device.cold+0x139/0x375
[  637.406281][    T9]  cm109_usb_probe+0x128d/0x17f0
[  637.411687][    T9]  usb_probe_interface+0x303/0x8f0
[  637.416845][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[  637.422924][    T9]  really_probe+0x241/0xa60
[  637.427429][    T9]  __driver_probe_device+0x1de/0x400
[  637.433175][    T9]  driver_probe_device+0x4c/0x1b0
[  637.438187][    T9]  __device_attach_driver+0x1df/0x340
[  637.443935][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  637.451528][    T9]  bus_for_each_drv+0x159/0x1e0
[  637.456397][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  637.462111][    T9]  ? lockdep_hardirqs_on+0x78/0x100
[  637.467340][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  637.473638][    T9]  __device_attach+0x1e4/0x4d0
[  637.478391][    T9]  ? __pfx___device_attach+0x10/0x10
[  637.484158][    T9]  ? do_raw_spin_unlock+0x145/0x1e0
[  637.489820][    T9]  device_initial_probe+0xaf/0xd0
[  637.494847][    T9]  bus_probe_device+0x64/0x160
[  637.500098][    T9]  device_add+0x11d9/0x1920
[  637.504604][    T9]  ? __pfx_device_add+0x10/0x10
[  637.509914][    T9]  usb_set_configuration+0xd97/0x1c60
[  637.515304][    T9]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  637.521906][    T9]  usb_generic_driver_probe+0xa1/0xe0
[  637.527289][    T9]  usb_probe_device+0xef/0x400
[  637.532611][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[  637.537986][    T9]  really_probe+0x241/0xa60
[  637.543096][    T9]  __driver_probe_device+0x1de/0x400
[  637.548400][    T9]  ? usb_driver_applicable+0x1c7/0x220
[  637.554412][    T9]  driver_probe_device+0x4c/0x1b0
[  637.559914][    T9]  __device_attach_driver+0x1df/0x340
[  637.565289][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  637.571670][    T9]  bus_for_each_drv+0x159/0x1e0
[  637.576518][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  637.582378][    T9]  ? lockdep_hardirqs_on+0x78/0x100
[  637.587599][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  637.593904][    T9]  __device_attach+0x1e4/0x4d0
[  637.599316][    T9]  ? __pfx___device_attach+0x10/0x10
[  637.604635][    T9]  ? do_raw_spin_unlock+0x145/0x1e0
[  637.610432][    T9]  device_initial_probe+0xaf/0xd0
[  637.615484][    T9]  bus_probe_device+0x64/0x160
[  637.620743][    T9]  device_add+0x11d9/0x1920
[  637.625248][    T9]  ? __pfx_device_add+0x10/0x10
[  637.630573][    T9]  ? add_device_randomness+0xb7/0xf0
[  637.635879][    T9]  usb_new_device.cold+0x685/0x115c
[  637.641545][    T9]  ? do_raw_spin_lock+0x128/0x260
[  637.646573][    T9]  ? __pfx_usb_new_device+0x10/0x10
[  637.652265][    T9]  ? mark_held_locks+0x40/0x70
[  637.657029][    T9]  hub_event+0x314d/0x4af0
[  637.661931][    T9]  ? __pfx_hub_event+0x10/0x10
[  637.666699][    T9]  ? debug_stats_show+0x210/0x250
[  637.672212][    T9]  ? rcu_is_watching+0x12/0xc0
[  637.676994][    T9]  process_one_work+0xa0e/0x1980
[  637.682428][    T9]  ? __pfx_process_one_work+0x10/0x10
[  637.687832][    T9]  ? __pfx_hub_event+0x10/0x10
[  637.693059][    T9]  worker_thread+0x5ef/0xe50
[  637.697667][    T9]  ? kthread+0x13a/0x450
[  637.702373][    T9]  ? __pfx_worker_thread+0x10/0x10
[  637.707481][    T9]  kthread+0x370/0x450
[  637.712007][    T9]  ? __pfx_kthread+0x10/0x10
[  637.716596][    T9]  ret_from_fork+0x72b/0xd50
[  637.721664][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  637.726788][    T9]  ? __switch_to+0x800/0x1100
[  637.731919][    T9]  ? __pfx_kthread+0x10/0x10
[  637.736542][    T9]  ret_from_fork_asm+0x1a/0x30
[  637.741800][    T9]  </TASK>
[  637.744812][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  637.752077][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  637.762755][    T9] Tainted: [L]=SOFTLOCKUP
[  637.767071][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  637.777120][    T9] Workqueue: usb_hub_wq hub_event
[  637.782134][    T9] Call Trace:
[  637.785392][    T9]  <TASK>
[  637.788311][    T9]  dump_stack_lvl+0x100/0x190
[  637.792980][    T9]  vpanic+0x552/0x970
[  637.796949][    T9]  ? __pfx_vpanic+0x10/0x10
[  637.801450][    T9]  panic+0xd1/0xe0
[  637.805160][    T9]  ? __pfx_panic+0x10/0x10
[  637.809591][    T9]  check_panic_on_warn.cold+0x19/0x34
[  637.814954][    T9]  ? usb_submit_urb+0x15fa/0x1910
[  637.819963][    T9]  __warn.cold+0x191/0x328
[  637.824363][    T9]  __report_bug+0x296/0x3d0
[  637.828867][    T9]  ? usb_submit_urb+0x15fa/0x1910
[  637.833899][    T9]  ? __pfx___report_bug+0x10/0x10
[  637.838919][    T9]  ? preempt_schedule_common+0x42/0xc0
[  637.844365][    T9]  ? preempt_schedule_thunk+0x16/0x30
[  637.849725][    T9]  report_bug_entry+0xe1/0x290
[  637.854479][    T9]  ? usb_submit_urb+0x15fd/0x1910
[  637.859483][    T9]  handle_bug+0x1cd/0x2a0
[  637.863795][    T9]  exc_invalid_op+0x17/0x50
[  637.868320][    T9]  asm_exc_invalid_op+0x1a/0x20
[  637.873152][    T9] RIP: 0010:usb_submit_urb+0x15fd/0x1910
[  637.878800][    T9] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 6d 1e b4 fa 48 8d 3d f6 3b 93 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00
[  637.898396][    T9] RSP: 0018:ffffc900000e6e50 EFLAGS: 00010283
[  637.904465][    T9] RAX: 00000000000e59f4 RBX: ffff8880504b6000 RCX: ffffc9001de07000
[  637.912427][    T9] RDX: 0000000000100000 RSI: ffff8880504b6000 RDI: ffffffff90e886f0
[  637.920388][    T9] RBP: ffff8880503c5080 R08: 0000000000000000 R09: fffffbfff21b774a
[  637.928338][    T9] R10: ffffc900000e6ed8 R11: 0000000000000000 R12: ffff88807cb340a0
[  637.936307][    T9] R13: ffff88807cb34010 R14: ffff88807cb34050 R15: ffff88805693c2e0
[  637.944279][    T9]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  637.950070][    T9]  ? __pm_runtime_resume+0xc3/0x170
[  637.955254][    T9]  cm109_input_open+0x273/0x420
[  637.960087][    T9]  ? __pfx_cm109_input_open+0x10/0x10
[  637.965463][    T9]  input_open_device+0x24c/0x3d0
[  637.970404][    T9]  kbd_connect+0x124/0x180
[  637.974817][    T9]  input_attach_handler.isra.0+0x177/0x1e0
[  637.980619][    T9]  input_register_device.cold+0x139/0x375
[  637.986327][    T9]  cm109_usb_probe+0x128d/0x17f0
[  637.991248][    T9]  usb_probe_interface+0x303/0x8f0
[  637.996352][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[  638.001969][    T9]  really_probe+0x241/0xa60
[  638.006463][    T9]  __driver_probe_device+0x1de/0x400
[  638.011731][    T9]  driver_probe_device+0x4c/0x1b0
[  638.016733][    T9]  __device_attach_driver+0x1df/0x340
[  638.022085][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  638.027959][    T9]  bus_for_each_drv+0x159/0x1e0
[  638.032793][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  638.038150][    T9]  ? lockdep_hardirqs_on+0x78/0x100
[  638.043334][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  638.049142][    T9]  __device_attach+0x1e4/0x4d0
[  638.053898][    T9]  ? __pfx___device_attach+0x10/0x10
[  638.059167][    T9]  ? do_raw_spin_unlock+0x145/0x1e0
[  638.064364][    T9]  device_initial_probe+0xaf/0xd0
[  638.069388][    T9]  bus_probe_device+0x64/0x160
[  638.074146][    T9]  device_add+0x11d9/0x1920
[  638.078644][    T9]  ? __pfx_device_add+0x10/0x10
[  638.083500][    T9]  usb_set_configuration+0xd97/0x1c60
[  638.088877][    T9]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  638.094935][    T9]  usb_generic_driver_probe+0xa1/0xe0
[  638.100298][    T9]  usb_probe_device+0xef/0x400
[  638.105050][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[  638.110425][    T9]  really_probe+0x241/0xa60
[  638.114923][    T9]  __driver_probe_device+0x1de/0x400
[  638.120218][    T9]  ? usb_driver_applicable+0x1c7/0x220
[  638.125678][    T9]  driver_probe_device+0x4c/0x1b0
[  638.130696][    T9]  __device_attach_driver+0x1df/0x340
[  638.136068][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[  638.141950][    T9]  bus_for_each_drv+0x159/0x1e0
[  638.146805][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[  638.152176][    T9]  ? lockdep_hardirqs_on+0x78/0x100
[  638.157374][    T9]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  638.163169][    T9]  __device_attach+0x1e4/0x4d0
[  638.167916][    T9]  ? __pfx___device_attach+0x10/0x10
[  638.173197][    T9]  ? do_raw_spin_unlock+0x145/0x1e0
[  638.178397][    T9]  device_initial_probe+0xaf/0xd0
[  638.183403][    T9]  bus_probe_device+0x64/0x160
[  638.188166][    T9]  device_add+0x11d9/0x1920
[  638.192669][    T9]  ? __pfx_device_add+0x10/0x10
[  638.197506][    T9]  ? add_device_randomness+0xb7/0xf0
[  638.202783][    T9]  usb_new_device.cold+0x685/0x115c
[  638.207977][    T9]  ? do_raw_spin_lock+0x128/0x260
[  638.212998][    T9]  ? __pfx_usb_new_device+0x10/0x10
[  638.218182][    T9]  ? mark_held_locks+0x40/0x70
[  638.222949][    T9]  hub_event+0x314d/0x4af0
[  638.227382][    T9]  ? __pfx_hub_event+0x10/0x10
[  638.232152][    T9]  ? debug_stats_show+0x210/0x250
[  638.237180][    T9]  ? rcu_is_watching+0x12/0xc0
[  638.241942][    T9]  process_one_work+0xa0e/0x1980
[  638.246896][    T9]  ? __pfx_process_one_work+0x10/0x10
[  638.252283][    T9]  ? __pfx_hub_event+0x10/0x10
[  638.257040][    T9]  worker_thread+0x5ef/0xe50
[  638.261645][    T9]  ? kthread+0x13a/0x450
[  638.265882][    T9]  ? __pfx_worker_thread+0x10/0x10
[  638.270984][    T9]  kthread+0x370/0x450
[  638.275052][    T9]  ? __pfx_kthread+0x10/0x10
[  638.279632][    T9]  ret_from_fork+0x72b/0xd50
[  638.284215][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  638.289320][    T9]  ? __switch_to+0x800/0x1100
[  638.293996][    T9]  ? __pfx_kthread+0x10/0x10
[  638.298570][    T9]  ret_from_fork_asm+0x1a/0x30
[  638.303335][    T9]  </TASK>
[  638.306688][    T9] Kernel Offset: disabled
[  638.310993][    T9] Rebooting in 86400 seconds..